Page MenuHome GnuPG
Feed Advanced Search

May 29 2019

misterzed88 added a comment to T4536: dirmngr fails to find OCSP signer certificate when responder is identified with key ID.

A high level test description is:

  1. Configure both gpgsm and dirmngr to use OCSP.
  2. Import the responder signer certificate with gpgsm --import.
  3. Use a certificate with OCSP responder extension present, or configure a default OCSP responder in dirmngr.
  4. Configure your OCSP responder to identify itself with key ID (and not subject name)
  5. Attempt to sign or verify with gpgsm.
  6. You should get an error, with dirmngr logs showing that the responder signer certificate could not be found.
May 29 2019, 9:11 AM · S/MIME, gnupg (gpg22), Bug Report
misterzed88 added a comment to T4535: gpgsm --sign prints misleading error message when using default key.

Thank you for a quick fix (despite this being a minor problem).

May 29 2019, 8:51 AM · gnupg (gpg22), S/MIME, Bug Report

May 23 2019

misterzed88 created T4537: gpgsm support for timestamp signatures.
May 23 2019, 4:25 PM · gnupg24, S/MIME, Feature Request
misterzed88 created T4536: dirmngr fails to find OCSP signer certificate when responder is identified with key ID.
May 23 2019, 11:18 AM · S/MIME, gnupg (gpg22), Bug Report
misterzed88 created T4535: gpgsm --sign prints misleading error message when using default key.
May 23 2019, 9:53 AM · gnupg (gpg22), S/MIME, Bug Report