Please never ever define NDEBUG. This is a severe misfeature of the assert macro.

That's exactly the point: I do want one common encryption key between the two cards: So I can distinguish between the two, but en-/decrypt with both.
One is on the GnuPG SmartCard, the other on a YubiKey - output --card-status (some things xxx'ed out) :

Here's the patch:

I contacted Microsoft Security Response Center (MSRC) in regard to this matter. They confirmed the failed PGP key verification, but have not yet any explanation for that.

Please show us your output of gpg --card-status for each card, and tell us the reason why you think "the pgp db seems screwed up".

For my test, six distinct keys (three subkeys for each smartcard) works fine.
IIUC, you try to use same decryption key by two smartcards. Currently, it is not supported.

Is it an issue when you share an decryption key E among two smartcards?
I think that when there are six distinct keys (three subkeys for one smartcard each), it works fine.
I'll try to make reproducible test case.

What are MS doing when they get it right, though? I'd look at the differences between those two to identify what they've messed up here.

Thanks. The mail is a standard, non-crypto mail with one attachment. That attachment is a TNEF file which has according to ytnef(1) just one file. That file has the name gpgolPGP.dat and contains a clearsigned message.

Sure, I zipped the eml which failed and I´ll send it by e-mail to you

Is it possible that you upload or send me a copy of such a mail (wk gnupg.org)? ZIP or tar the eml file and send it in an encrypted mail to me to make sure it won't be modified on the transport.

I checked my mails in detail, and I can confirm that the error occurs only with "Microsoft security update releases". Indeed "Microsoft security advisory notification" and "Microsoft security update summary for..." will be verified correctly.

I agree. It also happens to me. But only with mails coming from "Microsoft security update releases". Mails coming form "Microsoft security advisory notification" and Microsoft security update summary for..." are ok and are signed by the same key. It could be some trouble in MS automated email treatment.

This is mine:

Confirmed my theory of getentropy(3): https://reviews.freebsd.org/rS331279

Reading this discussion: http://lists.gnu.org/archive/html/bug-libtool/2018-01/msg00014.html
It seems that it could be fixed if we care about the order of libraries.
And it's not the issue for libgpg-error, which doesn't require external libraries.

For binutils, in Stretch, Debian specific patch was introduced.
Then, upstream introduced --enable-new-dtags option for configure to build binutils.
Now, Debian uses --enable-new-dtags option (at build time).

I think we should stick with the syscall for Linux.

FWIW, the canonical way to make sure that gpg-agent has been started is to run

You're very welcome. In my instance, this is "resolved" - I now get the prompt I realised I needed so to me this bug could be considered closed or wontfix, but I'll leave you to do with it as you please.

Basically, you are right. In addition, gpg-agent asks scdaemon about list of card/token.

OK - so if an entry is not required in sshcontrol for a smart-card key - is the private key stub sufficiently detailed enough for the agent to realise that it can ask for that card to be inserted for an ssh connection?

sshcontrol entry is required for non-smartcard keys, but not for keys on smartcard. This is intentional. For gpg-agent and current format, it is only the information for gpg-agent to know if a key is for SSH or not.

Also - going back to sshcontrol - with an ssh key added to the agent with ssh-add, an entry in sshcontrol is required - but not for a key on a smartcard. Is that intentional, or just a byproduct of the smartcard diversion that happens?

Oh, wow - yes, adding to sshcontrol brings up the prompt - I do however need to stop the agent from being restarted on insertion for it to subsequently ask for the unlock.

OpenBSD uses getentropy(2). glibc (>= 2.25) has getentropy(3), too.

Applied to master.

I see your point. You are right. For SSH access, it just fails without asking insertion. It's not Windows specific.
I checked the change of history of gpg-agent, but I cannot find prompting insertion was supported.
So, I don't thin this is a regression.

Yes, it's running. I have a scheduled task that spawns a vbscript to ensure that gpg-agent is started on login, and restarts it on insertion of a card (specifically for two reasons: windows ssh clients don't typically start agents automatically, and windows can cause gpg-agent to get a but upset after a card is removed and re-inserted. Edit: although, I think that latter reason might be resolved now... I haven't investigated deeply. more info here and here).

For the correctness of rndjent implementation, I'm applying D461: jent random requires finalizer to deallocate secure memory.

Thanks for your information.
Hum, you are using gpg-agent for SSH access.

werner,
I'm the spanish user. Are you also setting default ocsp responder option?
Setting only ocsp_signer doesn't worked, there are several CA's with diferent ocsp responders.

The reporter said that it did not work for him.

When no card is inserted, usage of an ssh client simply fails to request insertion of the card for the stub keys present in ~/.gnupg/.

Logfile:
18:24:30/11956/enabled debug flags:
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'enableSmime' val '0'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'encryptDefault' val '0'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'signDefault' val '0'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'inlinePGP' val '0'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'replyCrypt' val '1'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'preferSmime' val '0'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'autoresolve' val '1'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'autoretrieve' val 'null'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'automation' val '1'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'autosecure' val '1'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'autotrust' val '0'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'searchSmimeServers' val '0'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'smimeHtmlWarnShown' val '0'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'syncEnc' val '0'
18:24:30/11956/common.cpp:load_extension_value: LoadReg 'syncDec' val '0'
18:24:30/11956/gpgoladdin.cpp:~GpgolAddinFactory: Object deleted
18:24:30/11956/gpgoladdin.cpp:OnConnection: this is GpgOL 2.3.2
18:24:30/11956/gpgoladdin.cpp:OnConnection: using GPGME 1.12.1-beta43
18:24:30/11956/gpgoladdin.cpp:OnConnection: in Outlook 16.0.0.9126
18:24:30/11956/gpgoladdin.cpp:addGpgOLToReg: Found gpgol reg key. Leaving it unchanged.
18:24:30/11956/gpgoladdin.cpp:addGpgOLToReg: Found gpgol reg key. Leaving it unchanged.
18:24:30/11956/oomhelp.cpp:delete_category: Deleted category 'gpgol_string_1'
18:24:30/11956/olflange.cpp:install_forms: form `C:\Program Files (x86)\Gpg4win\share\gpgol\gpgol.cfg' installed
18:24:30/11956/olflange.cpp:install_forms: form `C:\Program Files (x86)\Gpg4win\share\gpgol\gpgol-ms.cfg' installed
18:24:30/11956/olflange.cpp:install_forms: form `C:\Program Files (x86)\Gpg4win\share\gpgol\gpgol-cs.cfg' installed
18:24:30/11956/olflange.cpp:install_forms: form `C:\Program Files (x86)\Gpg4win\share\gpgol\gpgol-form-signed.cfg' installed
18:24:30/11956/olflange.cpp:install_forms: form `C:\Program Files (x86)\Gpg4win\share\gpgol\gpgol-form-encrypted.cfg' installed
18:24:30/11956/storing option smimeHtmlWarnShown' value=0'
18:24:30/11956/gpgoladdin.cpp:check_html_preferred: No type or key for ReadAsPlain
18:24:30/11024/keycache.cpp:do_populate: Populating keycache
18:24:30/11024/keycache.cpp:do_populate_protocol: Starting keylisting for proto OpenPGP
18:24:31/11956/application-events.cpp:Invoke: ItemLoad event. Getting object.
18:24:31/11956/application-events.cpp:Invoke: ItemLoad event without mailitem.
18:24:31/11956/application-events.cpp:Invoke: ItemLoad event. Getting object.
18:24:31/11956/application-events.cpp:Invoke: Creating mail object for item: 000002035e0f7df0
18:24:31/8604/windowmessages.cpp:do_async: Do async with type 1108 after 0 ms
18:24:31/11956/mapihelp.cpp:mapi_change_message_class: checking message class `IPM.Note.GpgOL.PGPMessage'
18:24:31/11956/mapihelp.cpp:mapi_create_attach_table: message has 1 attachments
18:24:31/11956/mapihelp.cpp:mapi_create_attach_table: attachment info:
18:24:31/11956/ 3435237 mt=4 fname=gpgol_string_2' ct=(null)' ct_parms=`(null)'
18:24:31/11956/oomhelp.cpp:get_unique_id: '000002035e0f7df0' has now the uid: '3bb0889d-49b1-4644-8527-cfc0a8a52f69'
18:24:31/11956/mail.cpp:setUUID_o: uuid for 0000020350c563e0 set to 3bb0889d-49b1-4644-8527-cfc0a8a52f69
18:24:31/11956/mail.cpp:setUUID_o: uuid for 0000020350c563e0 is now 3bb0889d-49b1-4644-8527-cfc0a8a52f69
18:24:31/11956/mail.cpp:setUUID_o: Resetting uuid for 0000020350c563e0 to 3bb0889d-49b1-4644-8527-cfc0a8a52f69
18:24:31/11956/oomhelp.cpp:get_unique_id: '000002035e0f7df0' has now the uid: '3bb0889d-49b1-4644-8527-cfc0a8a52f69'
18:24:31/11024/keycache.cpp:do_populate_protocol: Starting keylisting for proto OpenPGP
18:24:31/11956/mimedataprovider.cpp:collect_data: found PGP Message marker,
18:24:31/11956/mimedataprovider.cpp:collect_data: Fixing up a possible broken message.
18:24:31/11956/mail.cpp:updateOOMData_o
18:24:31/11956/oomhelp.cpp:get_sender_SenderEMailAddress: Sender found
18:24:31/11956/oomhelp.cpp:get_sender_SentRepresentingAddress Found sent representing address "gpgol_string_3"
18:24:31/6572/mail.cpp:do_parsing: preparing the parser for: 0000020350c563e0
18:24:31/6572/parsecontroller.cpp:parse:0000020350c55810 decrypt: 1 verify: 0 with protocol: OpenPGP sender: gpgol_string_3 type: 10
18:24:31/11956/windowmessages.cpp:gpgol_window_proc: Recieved user msg: 1108
18:24:31/11956/windowmessages.cpp:gpgol_window_proc: clearing last mail
18:24:31/11024/keycache.cpp:do_populate: Keycache populated
18:24:32/6572/parsecontroller.cpp:parse:0000020350c55810 decrypt / verify done.
18:24:32/6572/parsecontroller.cpp:parse:0000020350c55810: decrypt err: 0 verify err: 0
18:24:32/6572/parsecontroller.cpp:parse:0000020350c55810 Decrypt / verify done errs: 0 / 0 numsigs: 1.
18:24:32/6572/windowmessages.cpp:do_in_ui_thread: Sending message of type 1102
18:24:32/15496/keycache.cpp:do_update updating: "gpgol_string_4" with protocol OpenPGP
18:24:32/11956/windowmessages.cpp:gpgol_window_proc: Recieved user msg: 1102
18:24:32/11956/keycache.cpp:getFromMap using "gpgol_string_4" for "gpgol_string_4"
18:24:32/11956/keycache.cpp:getByFpr Cache hit for gpgol_string_4.
18:24:32/11956/mail.cpp:updateSigstate: No signature with enough trust. Using first
18:24:32/11956/categorymanager.cpp:registerCategory: Register category gpgol_string_1 in new store gpgol_string_5 ref now 1
18:24:32/11956/oomhelp.cpp:get_oom_object: no object
18:24:32/11956/oomhelp.cpp:get_oom_object: no object
18:24:32/11956/mail.cpp:updateBody_o: Did not find body charset. Using internet Codepage 65001.
18:24:32/11956/mail.cpp:installFolderEventHandler_o: Install folder events watcher for gpgol_string_6.
18:24:32/11956/mail.cpp:parsing_done: Delayed invalidate to update sigstate.
18:24:32/15496/keycache.cpp:insertOrUpdateInFprMap Lost secret info on update. Merging.
18:24:32/15496/keycache.cpp:do_update Update job done
18:24:32/11956/gpgoladdin.cpp:GetCustomUI_MIME: GetCustomUI_MIME for id: Microsoft.Outlook.Explorer
18:24:32/11956/gpgoladdin.cpp:GetIDsOfNames: GetIDsOfNames for: ribbonLoaded
18:24:32/11956/gpgoladdin.cpp:Invoke: enter with dispid: 11
18:24:32/15500/windowmessages.cpp:do_in_ui_thread: Sending message of type 1101
18:24:32/11956/gpgoladdin.cpp:GetIDsOfNames: GetIDsOfNames for: getIsDetailsEnabled
18:24:32/11956/gpgoladdin.cpp:Invoke: enter with dispid: 13
18:24:32/11956/ribbon-callbacks.cpp:getContext: contextObj: _Explorer
18:24:32/11956/oomhelp.cpp:get_unique_id: Found uid '3bb0889d-49b1-4644-8527-cfc0a8a52f69' for '000002035e760970'
18:24:32/11956/gpgoladdin.cpp:GetIDsOfNames: GetIDsOfNames for: getSigLabel
18:24:32/11956/gpgoladdin.cpp:Invoke: enter with dispid: 1b
18:24:32/11956/ribbon-callbacks.cpp:getContext: contextObj: _Explorer
18:24:32/11956/oomhelp.cpp:get_unique_id: Found uid '3bb0889d-49b1-4644-8527-cfc0a8a52f69' for '000002035e7e9d30'
18:24:32/11956/gpgoladdin.cpp:GetIDsOfNames: GetIDsOfNames for: btnSigstateLarge
18:24:32/11956/gpgoladdin.cpp:Invoke: enter with dispid: 1d
18:24:32/11956/ribbon-callbacks.cpp:getContext: contextObj: _Explorer
18:24:32/11956/oomhelp.cpp:get_unique_id: Found uid '3bb0889d-49b1-4644-8527-cfc0a8a52f69' for '000002035e7e9470'
18:24:33/11956/windowmessages.cpp:gpgol_window_proc: Recieved user msg: 1101
18:24:33/11956/windowmessages.cpp:gpgol_window_proc: Invalidating UI
18:24:33/11956/gpgoladdin.cpp:invalidateRibbons: Invalidating ribbon: 000002035ddb5750
18:24:33/11956/gpgoladdin.cpp:invalidateRibbons: Invalidation done.
18:24:33/11956/windowmessages.cpp:gpgol_window_proc: Invalidation done
18:24:33/11956/gpgoladdin.cpp:GetIDsOfNames: GetIDsOfNames for: getSigLabel
18:24:33/11956/gpgoladdin.cpp:Invoke: enter with dispid: 1b
18:24:33/11956/ribbon-callbacks.cpp:getContext: contextObj: _Explorer
18:24:33/11956/oomhelp.cpp:get_unique_id: Found uid '3bb0889d-49b1-4644-8527-cfc0a8a52f69' for '000002035e921b60'
18:24:33/11956/gpgoladdin.cpp:GetIDsOfNames: GetIDsOfNames for: btnSigstateLarge
18:24:33/11956/gpgoladdin.cpp:Invoke: enter with dispid: 1d
18:24:33/11956/ribbon-callbacks.cpp:getContext: contextObj: _Explorer
18:24:33/11956/oomhelp.cpp:get_unique_id: Found uid '3bb0889d-49b1-4644-8527-cfc0a8a52f69' for '000002035e921b60'
18:24:33/11956/gpgoladdin.cpp:GetIDsOfNames: GetIDsOfNames for: getIsDetailsEnabled
18:24:33/11956/gpgoladdin.cpp:Invoke: enter with dispid: 13
18:24:33/11956/ribbon-callbacks.cpp:getContext: contextObj: _Explorer
18:24:33/11956/oomhelp.cpp:get_unique_id: Found uid '3bb0889d-49b1-4644-8527-cfc0a8a52f69' for '000002035e921b60'
18:24:34/15092/cpphelp.cpp:in_de_vs_mode: Checking for de-vs mode.
18:24:34/15092/gpgoladdin.cpp:init_gpgme_config: init_gpgme_config de_vs_mode 0
18:25:16/11956/application-events.cpp:Invoke: ItemLoad event. Getting object.
18:25:16/11956/application-events.cpp:Invoke: Creating mail object for item: 000002035ea410b0
18:25:16/16324/windowmessages.cpp:do_async: Do async with type 1108 after 0 ms
18:25:16/11956/mapihelp.cpp:mapi_change_message_class: checking message class `IPM.Note'
18:25:16/11956/mapihelp.cpp:change_message_class_ipm_note: content type is 'multipart/mixed'
18:25:16/11956/mapihelp.cpp:mapi_get_body_as_stream: OpenProperty tag=83ca0102 failed: hr=0x8004010f
18:25:16/11956/mapihelp.cpp:get_msgcls_from_pgp_lines: Detected non whitespace T before a PGP Marker
18:25:16/11956/mailitem-events.cpp:Invoke: Non crypto mail 0000020350cf3560 opened. Updating sigstatus.
18:25:16/11956/mailitem-events.cpp:Invoke: Canceling write event.
18:25:16/11956/mailitem-events.cpp:Invoke: Removing Mail for message: 000002035e0f7df0.
18:25:16/11956/oomhelp.cpp:lookup_oom_dispid: error looking up dispid(Categories)=6828: hr=0x8c540108
18:25:16/11956/categorymanager.cpp:removeCategory Failed to remvoe category.
18:25:16/11956/categorymanager.cpp:unregisterCategory: Unregister category gpgol_string_1 in store gpgol_string_5 ref now 0
18:25:16/11956/categorymanager.cpp:unregisterCategory: Deleting gpgol_string_1 for store gpgol_string_5
18:25:16/11956/oomhelp.cpp:delete_category: Deleted category 'gpgol_string_1'
18:25:16/11956/parsecontroller.cpp:~ParseController
18:25:16/11956/mimedataprovider.cpp:~MimeDataProvider
18:25:16/11956/mimedataprovider.cpp:~MimeDataProvider
18:25:16/11956/windowmessages.cpp:gpgol_window_proc: Recieved user msg: 1108
18:25:16/11956/windowmessages.cpp:gpgol_window_proc: clearing last mail
18:25:16/1544/windowmessages.cpp:do_in_ui_thread: Sending message of type 1101
18:25:16/11956/windowmessages.cpp:gpgol_window_proc: Recieved user msg: 1101
18:25:16/11956/windowmessages.cpp:gpgol_window_proc: Invalidating UI
18:25:16/11956/gpgoladdin.cpp:invalidateRibbons: Invalidating ribbon: 000002035ddb5750
18:25:16/11956/gpgoladdin.cpp:invalidateRibbons: Invalidation done.
18:25:16/11956/windowmessages.cpp:gpgol_window_proc: Invalidation done
18:25:16/11956/gpgoladdin.cpp:GetIDsOfNames: GetIDsOfNames for: getSigLabel
18:25:16/11956/gpgoladdin.cpp:Invoke: enter with dispid: 1b
18:25:16/11956/ribbon-callbacks.cpp:getContext: contextObj: _Explorer
18:25:16/11956/oomhelp.cpp:get_pa_string: Property `http://schemas.microsoft.com/mapi/string/{31805AB8-3E92-11DC-879C-00061B031004}/GpgOL UID/0x0000001F' is not a string (vt=0)
18:25:16/11956/oomhelp.cpp:get_unique_id: No uuid found in oom for '000002035f0cb670'
18:25:16/11956/mapihelp.cpp:mapi_get_uid: Failed to get prop for '000002035f31b6c8'
18:25:16/11956/ribbon-callbacks.cpp:get_mail_from_control: Failed to get uid for 000002035f0cb670
18:25:16/11956/ribbon-callbacks.cpp:get_sig_label: No mail.
18:25:16/11956/gpgoladdin.cpp:GetIDsOfNames: GetIDsOfNames for: btnSigstateLarge
18:25:16/11956/gpgoladdin.cpp:Invoke: enter with dispid: 1d
18:25:16/11956/ribbon-callbacks.cpp:getContext: contextObj: _Explorer
18:25:16/11956/oomhelp.cpp:get_pa_string: Property `http://schemas.microsoft.com/mapi/string/{31805AB8-3E92-11DC-879C-00061B031004}/GpgOL UID/0x0000001F' is not a string (vt=0)
18:25:16/11956/oomhelp.cpp:get_unique_id: No uuid found in oom for '000002035f0cb850'
18:25:16/11956/mapihelp.cpp:mapi_get_uid: Failed to get prop for '000002035f31b6c8'
18:25:16/11956/ribbon-callbacks.cpp:get_mail_from_control: Failed to get uid for 000002035f0cb850
18:25:16/11956/gpgoladdin.cpp:GetIDsOfNames: GetIDsOfNames for: getIsDetailsEnabled
18:25:16/11956/gpgoladdin.cpp:Invoke: enter with dispid: 13
18:25:16/11956/ribbon-callbacks.cpp:getContext: contextObj: _Explorer
18:25:16/11956/oomhelp.cpp:get_pa_string: Property `http://schemas.microsoft.com/mapi/string/{31805AB8-3E92-11DC-879C-00061B031004}/GpgOL UID/0x0000001F' is not a string (vt=0)
18:25:16/11956/oomhelp.cpp:get_unique_id: No uuid found in oom for '000002035f0cb850'
18:25:16/11956/mapihelp.cpp:mapi_get_uid: Failed to get prop for '000002035f31b6c8'
18:25:16/11956/ribbon-callbacks.cpp:get_mail_from_control: Failed to get uid for 000002035f0cb850
18:25:22/11956/application-events.cpp:Invoke: ItemLoad event. Getting object.
18:25:22/11956/application-events.cpp:Invoke: Creating mail object for item: 000002035ef62ca0
18:25:22/6948/windowmessages.cpp:do_async: Do async with type 1108 after 0 ms
18:25:22/11956/mapihelp.cpp:mapi_change_message_class: checking message class `IPM.Note'
18:25:22/11956/mapihelp.cpp:change_message_class_ipm_note: content type is 'multipart/encrypted'
18:25:22/11956/mapihelp.cpp:change_message_class_ipm_note: protocol is 'application/pgp-encrypted'
18:25:22/11956/mapihelp.cpp:mapi_change_message_class: saving old message class
18:25:22/11956/ERROR/mapihelp.cpp:mapi_change_message_class: can't save old message class: hr=0x80070005
18:25:22/11956/mapihelp.cpp:mapi_create_attach_table: message has 2 attachments
18:25:22/11956/mapihelp.cpp:mapi_create_attach_table: attachment info:
18:25:22/11956/ 3435173 mt=0 fname=gpgol_string_7' ct=application/pgp-encrypted' ct_parms=`(null)'
18:25:22/11956/ 3435205 mt=0 fname=gpgol_string_8' ct=application/octet-stream' ct_parms=`(null)'
18:25:22/11956/mapihelp.cpp:mapi_mark_moss_attach: Marking 3435173 as MOSS attachment
18:25:22/11956/ERROR/mapihelp.cpp:mapi_mark_moss_attach: can't set GpgOL Attach Type property: hr=0x80070005
18:25:22/11956/mapihelp.cpp:mapi_mark_moss_attach: Marking 3435205 as MOSS attachment
18:25:22/11956/ERROR/mapihelp.cpp:mapi_mark_moss_attach: can't set GpgOL Attach Type property: hr=0x80070005
18:25:22/11956/oomhelp.cpp:put_pa_variant: failure: invoking SetProperty p=0000000000000000 vt=0 hr=0x80020009 argErr=0x0
18:25:22/11956/oomhelp.cpp:get_unique_id: failed to set uid '73470a24-55fc-4be4-8621-cc7d64ff68a0' for '000002035ef62ca0'
18:25:22/11956/mail.cpp:setUUID_o: uuid for 0000020350cf37c0 set to (null)
18:25:22/11956/mail.cpp:setUUID_o: Failed to get/set uuid for 000002035ef62ca0
18:25:22/11956/mailitem-events.cpp:Invoke: Failed to set uuid.
18:25:22/11956/windowmessages.cpp:gpgol_window_proc: Recieved user msg: 1108
18:25:22/11956/windowmessages.cpp:gpgol_window_proc: clearing last mail
18:25:22/11956/gpgoladdin.cpp:GetCustomUI_MIME: GetCustomUI_MIME for id: Microsoft.Outlook.Mail.Read
18:25:24/11956/windowmessages.cpp:gpgol_hook: Got WM_CLOSE
18:25:25/11956/windowmessages.cpp:gpgol_hook: Got WM_CLOSE
18:25:25/11956/windowmessages.cpp:gpgol_hook: WM_CLOSE windowmessage for explorer. Shutting down.
18:25:25/11956/gpgoladdin.cpp:shutdown: Releasing Application Event Sink;
18:25:25/11956/gpgoladdin.cpp:shutdown: Releasing Explorers Event Sink;
18:25:25/11956/gpgoladdin.cpp:shutdown: Releasing Explorer Event Sinks;
18:25:25/11956/storing option smimeHtmlWarnShown' value=0'
18:25:27/11956/mailitem-events.cpp:Invoke: Removing Mail for message: 000002035ea410b0.
18:25:27/11956/gpgoladdin.cpp:~GpgolRibbonExtender: cleaning up GpgolRibbonExtender object;

A list of SHA-1 fingerprints for the valid certificates. With our without colons.

@werner what should the contents of the file look like?