From mboxrd@z Thu Jan  1 00:00:00 1970
From: Ian Barton <lists@wilkesley.net>
Subject: Re: org-caldav: problems connecting to owndrive
Date: Wed, 07 May 2014 15:39:15 +0100
Message-ID: <536A4593.9050905@wilkesley.net>
References: <CAMF4YiM=2qYoTvjrjTvdN_c=Am7r4S1=R2NytUtsGsLE39BK7A@mail.gmail.com>
Reply-To: ian@manor-farm.org
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit
Return-path: <emacs-orgmode-bounces+geo-emacs-orgmode=m.gmane.org@gnu.org>
Received: from eggs.gnu.org ([2001:4830:134:3::10]:53069)
	by lists.gnu.org with esmtp (Exim 4.71)
	(envelope-from <lists@wilkesley.net>) id 1Wi30G-0001IJ-4h
	for emacs-orgmode@gnu.org; Wed, 07 May 2014 10:39:28 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
	(envelope-from <lists@wilkesley.net>) id 1Wi30B-0006bC-5a
	for emacs-orgmode@gnu.org; Wed, 07 May 2014 10:39:24 -0400
Received: from mail2.wilkesley.net ([109.74.196.44]:37232
	helo=li40-130.members.linode.com)
	by eggs.gnu.org with esmtp (Exim 4.71)
	(envelope-from <lists@wilkesley.net>) id 1Wi30A-0006b4-Vk
	for emacs-orgmode@gnu.org; Wed, 07 May 2014 10:39:19 -0400
In-Reply-To: <CAMF4YiM=2qYoTvjrjTvdN_c=Am7r4S1=R2NytUtsGsLE39BK7A@mail.gmail.com>
List-Id: "General discussions about Org-mode." <emacs-orgmode.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/emacs-orgmode>,
	<mailto:emacs-orgmode-request@gnu.org?subject=unsubscribe>
List-Archive: <http://lists.gnu.org/archive/html/emacs-orgmode>
List-Post: <mailto:emacs-orgmode@gnu.org>
List-Help: <mailto:emacs-orgmode-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/emacs-orgmode>,
	<mailto:emacs-orgmode-request@gnu.org?subject=subscribe>
Errors-To: emacs-orgmode-bounces+geo-emacs-orgmode=m.gmane.org@gnu.org
Sender: emacs-orgmode-bounces+geo-emacs-orgmode=m.gmane.org@gnu.org
To: Seb Frank <sebsfrank@gmail.com>, "emacs-orgmode@gnu.org" <emacs-orgmode@gnu.org>

On 07/05/14 14:43, Seb Frank wrote:
> Hi there,
>
> I've been trying to setup org-caldav to sync to my owndrive calendar.
>
> Setup is
>
> #+begin_src emacs-lisp
> (setq org-caldav-url
> "https://my.owndrive.com/remote.php/caldav/calendars/myusername")
> (setq org-caldav-calendar-id "myid")
> (setq org-caldav-inbox "~/org/test.org <http://test.org>")
> #+end_src
>
> When I try org-caldav-sync, it fails with:
>
> Contacting host: my.owndrive.com:443 <http://my.owndrive.com:443>
> gnutls.c: [0] (Emacs) fatal error: Public key signature verification has
> failed.
> gnutls.el: (err=[-89] Public key signature verification has failed.)
> boot: (:priority NORMAL :hostname my.owndrive.com
> <http://my.owndrive.com> :loglevel 0 :min-prime-bits 256 :trustfiles nil
> :crlfiles nil :keylist nil :verify-flags nil :verify-error nil
> :callbacks nil)
> edebug-signal: GnuTLS error: #<process my.owndrive.com
> <http://my.owndrive.com>>, -89
>
> Testing this with gnutls on the command line confirms the problem:
> % gnutls-cli -V -p 443 my.owndrive.com <http://my.owndrive.com>
> ...
> - Status: The certificate is NOT trusted. The signature in the
> certificate is invalid.
> *** Verifying server certificate failed...
> *** Fatal error: Error in the certificate.
> *** Handshake has failed
> GnuTLS error: Error in the certificate.
>
> Does anyone know if there is a way to tell org-caldav or url-dav to use
> an untrusted certificate?
>

Hi Seb,

I think you need to handle it at the gnutls level. Have a look at 
http://blog.tremily.us/posts/X.509_certificates/

Particularly:

GnuTLS

In GnuTLS, you set the list of trusted CAs using 
gnutls_certificate_set_x509_trust_file. By convention this function is 
pointed to the /etc/ssl/certs/ca-certificates.crt file mentioned above

Ian.