Variable: tls-checktrust

tls-checktrust is a customizable variable defined in tls.el.gz.

Value

nil

Documentation

Indicate if certificates should be checked against trusted root certs.

If this is ask, the user can decide whether to accept an untrusted certificate. You may have to adapt tls-program in order to make this feature work properly, i.e., to ensure that the external program knows about the root certificates you consider trustworthy, e.g.:

(setq tls-program
      '("gnutls-cli --x509cafile /etc/ssl/certs/ca-certificates.crt \\
-p %p %h"
        "gnutls-cli --x509cafile /etc/ssl/certs/ca-certificates.crt \\
-p %p %h --protocols ssl3"))

This variable was added, or its default value changed, in Emacs 23.1.

Source Code

;; Defined in /usr/src/emacs/lisp/obsolete/tls.el.gz
(defcustom tls-checktrust nil
  "Indicate if certificates should be checked against trusted root certs.
If this is `ask', the user can decide whether to accept an
untrusted certificate.  You may have to adapt `tls-program' in
order to make this feature work properly, i.e., to ensure that
the external program knows about the root certificates you
consider trustworthy, e.g.:

\(setq tls-program
      \\='(\"gnutls-cli --x509cafile /etc/ssl/certs/ca-certificates.crt \\
-p %p %h\"
        \"gnutls-cli --x509cafile /etc/ssl/certs/ca-certificates.crt \\
-p %p %h --protocols ssl3\"))"
  :type '(choice (const :tag "Always" t)
		 (const :tag "Never" nil)
		 (const :tag "Ask" ask))
  :version "23.1")