bug#19404: 25.0.50; Gnus shows self-signed certificate warning when connecting to Gmane

[Eli Zaretskii]

> From: David Engster <deng@randomsample.de>
> Cc: 19404@debbugs.gnu.org,  larsi@gnus.org,  dgutov@yandex.ru
> Date: Thu, 18 Dec 2014 22:50:22 +0100
> 
> David Engster writes:
> > It *could* be self-signed. I don't know the best way in libgnutls to
> > detect this. You probably have to compare issuer and subject, or
> > similar.
> 
> So my guess would be: use gnutls_x509_crt_get_dn2 or maybe
> gnutls_x509_crt_get_subject and compare to
> gnutls_certificate_get_issuer. If equal -> self-signed. But that could
> be wrong. Best place is to ask on the GnuTLS list.

Thanks, I think we should do that (and also ask).  I'm afraid if we
are too vague or even inaccurate in these prompts (as some Web
browsers already are), too many people will become annoyed and will
simply disregard them, and either always automatically accept the
"Always" alternative, or even disable these checks completely.