I'm trying to set up gnus for reading mailing lists.

According to some threads I have the following in my init.el

(setq user-mail-address "[email protected]")
(setq user-full-name "my name")

(setq gnus-select-method
             '(nntp "news.gmane.org"
                     (nntp-open-connection-function nntp-open-tls-stream)
                     (nntp-port-number 563)
                     (nnir-search-engine gmane)

But running M-x gnus results in:

Warning: Opening nntp server on news.gmane.org...failed: >>> (error
Certificate validation failed news.gmane.org, verification code 42);
Server nntp+news.gmane.org previously determined to be down; not

Do I do something wrong or is gmane down?

1 Answer 1


Since 2018-01-12 (about half a year as I write this), the certificate for news.gmane.org has been expired.

% gnutls-cli --crlf news.gmane.org -p nntps <<<QUIT
Processed 148 CA certificate(s).
Resolving 'news.gmane.org:nntps'...
Connecting to ''...
- Certificate type: X.509
- Got a certificate list of 1 certificates.
- Certificate[0] info:
 - subject `CN=news.gmane.org,O=Gmane,ST=Some-State,C=NO', issuer `CN=news.gmane.org,O=Gmane,ST=Some-State,C=NO', serial 0x009398630d3ab6ffd6, RSA key 1024 bits, signed using RSA-SHA1, activated `2015-01-13 21:13:46 UTC', expires `2018-01-12 21:13:46 UTC', pin-sha256="V/d+/hePkSL5MylBGzvZ/c21qMz+E9H1SfyP1NKBr1Y="
        Public Key ID:
        Public Key PIN:
        Public key's random art:
                +--[ RSA 1024]----+
                |=O+.ooo          |
                |+*o+ . .         |
                |= + + o          |
                | . + = o         |
                |  . + + S        |
                |   . . =         |
                |    . +          |
                |     E .         |
                |      .          |

- Status: The certificate is NOT trusted. The certificate issuer is unknown. The certificate chain uses expired certificate.
*** PKI verification of server certificate failed...
*** Fatal error: Error in the certificate.
*** handshake has failed: Error in the certificate.

January 2018 is after you posed this question, but this (less than ideal) workaround still applies: do not connect to Gmane with a secure connection.

(setq gnus-select-method
      '(nntp "news.gmane.org"
             (nntp-open-connection-function nntp-open-plain-stream)))

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.