Page MenuHome GnuPG

dirmngr fails on http 302 reply when attempting to fetch CRL
Closed, ResolvedPublic

Description

Release: 0.9.3

Description

When dirmngr tries to check CRL for my certificate, it issues an http req for an URL like the following: "http://crl.oces.certifikat.dk/oces/1234567890.crl". That URL gives a http reply code 302 (found) and a new location URL "http://crl.oces.certifikat.dk/oces.crl", but dirmngr just fails claiming "no data".

How To Repeat

You need a certificate from certificate.dk (Danish citizens only) and kmail with S/Mime enabled. During the signing process the error described above occurs. Kmail fails with a "signing failed: general error" error.

Fix

Unknown. Disabling http just makes it fail with a "bad certificate" instead.

Event Timeline

I encountered this too and actually started to fix it. However
some more important work delayed it. I hope that I get to it again
next week.

Marcus, this is about the missing HTTP redirection feature we recently talked about.

werner added a subscriber: marcus.
werner added a subscriber: werner.
werner removed a project: In Progress.

Fixed in SVN

werner removed a project: Restricted Project.