procyberian/emacs
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Fix spelling of "intermediate" (it's not "intermediary")

Browse source 
* doc/emacs/misc.texi (Network Security): Ditto.

* lisp/net/nsm.el (network-security-protocol-checks): Fix spelling
on "intermediate".
(nsm-protocol-check--intermediate-sha1): Ditto.
This commit is contained in:
Lars Ingebrigtsen 2018-06-25 18:56:55 +02:00
parent 71e4a4b7e5
commit 27a21970f6
2 changed files with 5 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
doc/emacs/misc.texi
View file

@ -361,8 +361,8 @@ third parties. If this number is too low, you will be warned.
The @acronym{RC4} stream cipher is believed to be of low quality and
may allow eavesdropping by third parties.
@item @acronym{SHA1} in the host certificate or in intermediary certificates
It is believed that if an intermediary certificate uses
@item @acronym{SHA1} in the host certificate or in intermediate certificates
It is believed that if an intermediate certificate uses
the @acronym{SHA1} hashing algorithm, then third parties can issue
certificates pretending to be that issuing instance. These
connections are therefore vulnerable to man-in-the-middle attacks.

6
lisp/net/nsm.el
View file

@ -185,7 +185,7 @@ unencrypted."
'((diffie-hellman-prime-bits medium 1024)
(rc4 medium)
(signature-sha1 medium)
(intermediary-sha1 medium)
(intermediate-sha1 medium)
(3des high)
(ssl medium))
"This variable specifies what TLS connection checks to perform.
@ -255,7 +255,7 @@ HOST PORT STATUS OPTIONAL-PARAMETER.")
"The certificate used to verify the connection to %s:%s uses the SHA1 algorithm (%s), which is believed to be unsafe."
host port signature-algorithm))))
(defun nsm-protocol-check--intermediary-sha1 (host port status _)
(defun nsm-protocol-check--intermediate-sha1 (host port status _)
;; Skip the first certificate, because that's the host certificate.
(cl-loop for certificate in (cdr (plist-get status :certificates))
for algo = (plist-get certificate :signature-algorithm)
@ -266,7 +266,7 @@ HOST PORT STATUS OPTIONAL-PARAMETER.")
(string-match "\\bSHA1\\b" algo)
(not (nsm-query
host port status :signature-sha1
"An intermediary certificate used to verify the connection to %s:%s uses the SHA1 algorithm (%s), which is believed to be unsafe."
"An intermediate certificate used to verify the connection to %s:%s uses the SHA1 algorithm (%s), which is believed to be unsafe."
host port algo)))
do (cl-return nil)
finally (cl-return t)))