Mailing List Archive

New submission from Bernhard Herzog <bh@intevation.de>:

When trying to validate a certificate where the root certificate is not yet
trusted, validation fails with "missing certificate". No ldap server is
configured. All certificates of the certification chain have been imported.
The allow-mark-trusted options is set in gpg-agent but it never asks the user
whether the root is trusted.

gpgsm 1.9.25
dirmngr 0.9.0
gpgme 1.0.2

Some watchgnupg debug output:

6 - 2005-01-17 18:31:46 dirmngr[18249]: DBG: checking distribution points
6 - 2005-01-17 18:31:46 dirmngr[18249]: DBG: fetching CRL from
`ldap://ca.intevation.org/cn=Test-ZS 5, o=Intevation GmbH,
c=DE?certificateRevocationList'
6 - 2005-01-17 18:31:46 dirmngr[18249]: LDAP Wrapper 18250 gestartet
6 - 2005-01-17 18:31:46 dirmngr[18249]: DBG: inserting CRL
6 - 2005-01-17 18:31:46 dirmngr[18249]: Die "Update Times" dieser CRL sind:
this=20050113T165744 next=20050203T165744
6 - 2005-01-17 18:31:46 dirmngr[18249]: CRL Herausgeberzertifikat wird über
"authorityKeyIdentifier" geholt
6 - 2005-01-17 18:31:46 dirmngr[18249]: Fehler beim Holen des Zertifikats für
den Issuer: Configuration error
6 - 2005-01-17 18:31:46 dirmngr[18249]: issuer certificate (#02/CN=Wurzel ZS
3,O=Intevation GmbH,C=DE) not found
6 - 2005-01-17 18:31:46 dirmngr[18249]: crl_parse_insert fehlgeschlagen:
Missing certificate
6 - 2005-01-17 18:31:46 dirmngr[18249]: crl_cache_insert über den DP
fehlgeschlagen: Missing certificate
6 - 2005-01-17 18:31:46 dirmngr[18249]: Kommando ISVALID fehlgeschlagen:
Missing certificate

----------
assignedto: werner
messages: 1885
nosy: bh, werner
priority: urgent
status: unread
title: "Missing Certificate" when validating with an as yet untrusted root
topic: DirMngr, gpg-agent, gpgsm
______________________________________________________
Aegypten issue tracker <aegypten-issues@intevation.de>
<https://intevation.de/roundup/aegypten/issue292>
______________________________________________________