Dirmngr: no suitable certificate found to verify the OCSP response
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	aheinecke
	May 7 2018, 1:59 PM

Description

It was reported in the Wald Message Board that OCSP validation fails for several "real world" certificates with the message above. I can reproduce that under GNU/Linux with current gnupg.

The Forum Message is: https://wald.intevation.org/forum/message.php?msg_id=5947&group_id=11

Next steps:

Analyze why dirmngr can't validate the OCSP Response and what other tools do that verify the response.

Details

External Link: https://wald.intevation.org/forum/message.php?msg_id=5947&group_id=11
Version: 2.2.7-beta36

Revisions and Commits

rG GnuPG
	rG5281ecbe3ae8 dirmngr: Allow for other hash algorithms than SHA-1 in OCSP.
	rG405f41007c35 dirmngr: Allow for other hash algorithms than SHA-1 in OCSP.