summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLars Ingebrigtsen <larsi@gnus.org>2019-07-15 20:31:42 +0200
committerLars Ingebrigtsen <larsi@gnus.org>2019-07-15 20:31:42 +0200
commit93e1f7c66f77827bcad7a5636c3edcff685ca19e (patch)
tree32a6d1ab777b86dd2c3a8c65d5f9cc39725de77d
parent6cd3b7a62b755f8cd5ff9b02c227f133abfb4ec2 (diff)
downloademacs-93e1f7c66f77827bcad7a5636c3edcff685ca19e.tar.gz
emacs-93e1f7c66f77827bcad7a5636c3edcff685ca19e.tar.bz2
emacs-93e1f7c66f77827bcad7a5636c3edcff685ca19e.zip
Fix saving certificates in the NSM on high security levels
* lisp/net/nsm.el (nsm-check-certificate): `nsm-fingerprint-ok-p' will save the fingerprint in the correct temporary/permanent storage, so saving it once more (in the permanent storage) if the security level is high or greater is a mistake (bug#27823).
-rw-r--r--lisp/net/nsm.el5
1 files changed, 0 insertions, 5 deletions
diff --git a/lisp/net/nsm.el b/lisp/net/nsm.el
index 6a312e2ebb4..dbfa2101f0c 100644
--- a/lisp/net/nsm.el
+++ b/lisp/net/nsm.el
@@ -149,11 +149,6 @@ unencrypted."
(not (nsm-new-fingerprint-ok-p host port status)))
(delete-process process)
nil)
- ((>= (nsm-level network-security-level) (nsm-level 'high))
- ;; Save the host fingerprint so that we can check it the
- ;; next time we connect.
- (nsm-save-host host port status 'fingerprint 'always)
- process)
(t
process)))