bug#31946: 27.0.50; The NSM should warn about more TLS problems

[Lars Ingebrigtsen]

Jimmy Yuen Ho Wong <wyuenho@gmail.com> writes:

> `(setq gnutls-log-level 999)` in Emacs currently doesn't tell me what
> KX algo was used , it just tells me AES-256-GCM was negotiated as a
> cipher. However,

To get the connection parameters, say something like:

(gnutls-peer-status (open-network-stream "foo" nil "dh-composite.badssl.com" 
"https" :tls-parameters (cons 'gnutls-x509pki (gnutls-boot-parameters :hostname 
"dh-composite.badssl.com"))))

=>

(:certificates ((:version 3 :serial-number 
"01:f2:02:03:1d:fd:a9:8e:fd:ff:0f:72:be:51:06:0d" :issuer "C=US,O=DigiCert 
Inc,CN=DigiCert SHA2 Secure Server CA" :valid-from "2017-03-18" :valid-to 
"2020-03-25" :subject "C=US,ST=California,L=Walnut Creek,O=Lucas 
Garron,CN=*.badssl.com" :public-key-algorithm "RSA" :certificate-security-level 
"Medium" :signature-algorithm "RSA-SHA256" :public-key-id 
"sha1:79:65:df:c9:3c:6a:e6:fe:83:81:ec:48:22:16:ec:44:ef:47:28:2a" 
:certificate-id 
"sha1:ca:53:08:74:6c:1e:06:44:d6:3a:f6:1b:f5:81:c7:2a:f9:0c:70:95") (:version 3 
:serial-number "01:fd:a3:eb:6e:ca:75:c8:88:43:8b:72:4b:cf:bc:91" :issuer 
"C=US,O=DigiCert Inc,OU=www.digicert.com,CN=DigiCert Global Root CA" 
:valid-from "2013-03-08" :valid-to "2023-03-08" :subject "C=US,O=DigiCert 
Inc,CN=DigiCert SHA2 Secure Server CA" :public-key-algorithm "RSA" 
:certificate-security-level "Medium" :signature-algorithm "RSA-SHA256" 
:public-key-id 
"sha1:51:bc:4f:77:17:08:cf:e5:09:dd:e9:ea:a5:54:8e:91:c0:67:78:53" 
:certificate-id 
"sha1:1f:b8:6b:11:68:ec:74:31:54:06:2e:8c:9c:c5:b1:71:a4:b7:cc:b4")) 
:certificate (:version 3 :serial-number 
"01:f2:02:03:1d:fd:a9:8e:fd:ff:0f:72:be:51:06:0d" :issuer "C=US,O=DigiCert 
Inc,CN=DigiCert SHA2 Secure Server CA" :valid-from "2017-03-18" :valid-to 
"2020-03-25" :subject "C=US,ST=California,L=Walnut Creek,O=Lucas 
Garron,CN=*.badssl.com" :public-key-algorithm "RSA" :certificate-security-level 
"Medium" :signature-algorithm "RSA-SHA256" :public-key-id 
"sha1:79:65:df:c9:3c:6a:e6:fe:83:81:ec:48:22:16:ec:44:ef:47:28:2a" 
:certificate-id 
"sha1:ca:53:08:74:6c:1e:06:44:d6:3a:f6:1b:f5:81:c7:2a:f9:0c:70:95") 
:diffie-hellman-prime-bits 2047 :key-exchange "DHE-RSA" :protocol "TLS1.2" 
:cipher "AES-128-GCM" :mac "AEAD")


-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no