The file /usr/share/gnupg/com-certs.pem contains 15 X.509 certificates that are
either expired or incomplete. The certificates are mostly from several German
issuers like “Deutscher Sparkassen Verlag GmbH”, “Regulierungsbehörde für
Telekommunikation und Post” or “Bundesnetzagentur”.
The certificates are utterly useless (15 incomplete or expired certificates from
a bunch of German companies) and only clutter gpgsm --list-keys with
non-deletable, not usable content.
According to the answer in Arch Linux bug tracker this weird contents are
already there before packing the software for Arch Linux, so I’m going to file
that bug here, too.
Steps to reproduce:
- install gnupg package
- if already existent move ~/.gnupg to another location (BACKUP!)
- generate a new keypair with gpg --gen-key
- check X.509 certificates with gpgsm --list-keys