bug#22297: 24.5; gnutls builds do not verify https by default

[Lars Magne Ingebrigtsen]

Glyph Lefkowitz <glyph@twistedmatrix.com> writes:

> ;; This elisp program illustrates the issue.
>
> (require 'cl)
> (let ((bad-hosts
>        (loop for bad
>            in `("https://wrong.host.badssl.com/";
>                 "https://self-signed.badssl.com/";)
>            if (condition-case e
>                   (url-retrieve
>                    bad (lambda (retrieved) t))
>                 (error nil))
>            collect bad)))
>   (if bad-hosts
>       (error (format "tls misconfigured; retrieved %s ok"
>                    bad-hosts))
>     (url-retrieve "https://badssl.com";
>                 (lambda (retrieved) t))))

I'm unable to reproduce the problem.  With an Emacs built with GnuTLS, I
get warnings about invalid certificates.  

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no