Mailing List Archive: GPGME: disable S/MIME (signature verification)

GPGME: disable S/MIME (signature verification)

Aug 2, 2023, 7:31 AM

Post #1 of 5 (239 views)

Hi

How can I disable S/MIME or S/MIME signature verification in GPGME?

Many Mutt users use GPGME, but few verify S/MIME signatures. In these
cases, the check is useless. It's also annoying, because it can take
around 25 seconds to timeout and fail.

See the relevant thread over on mutt-users:
http://lists.mutt.org/pipermail/mutt-users/Week-of-Mon-20230724/004259.html

Thanks

--
ilf

If you upload your address book to "the cloud", I don't want to be in it.

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: GPGME: disable S/MIME (signature verification) [ In reply to ]

kloecker at kde

Aug 2, 2023, 11:00 AM

Post #2 of 5 (239 views)

Permalink

On Mittwoch, 2. August 2023 16:31:19 CEST ilf wrote:
> How can I disable S/MIME or S/MIME signature verification in GPGME?
>
> Many Mutt users use GPGME, but few verify S/MIME signatures. In these
> cases, the check is useless. It's also annoying, because it can take
> around 25 seconds to timeout and fail.

Add
disable-dirmngr
to your gpgsm.conf.

This won't disable S/MIME signature verification, but it disables expensive
online checks. The alternative in GpgME is
https://gnupg.org/documentation/manuals/gpgme/Offline-Mode.html#Offline-Mode

Regards,
Ingo

Re: GPGME: disable S/MIME (signature verification) [ In reply to ]

ilf at zeromail

Aug 2, 2023, 11:53 AM

Post #3 of 5 (239 views)

Permalink

Thanks. But those sound like they affect OpenPGP, too.

Sorry, I didn't make this explicit in my first mail: But I want to use
OpenPGP with all features, including Dirmngr. I just don't want to use
S/MIME.

Ingo Klöcker:
> Add disable-dirmngr to your gpgsm.conf.
> This won't disable S/MIME signature verification, but it disables expensive
> online checks. The alternative in GpgME is
> https://gnupg.org/documentation/manuals/gpgme/Offline-Mode.html#Offline-Mode

--
ilf

If you upload your address book to "the cloud", I don't want to be in it.

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: GPGME: disable S/MIME (signature verification) [ In reply to ]

kloecker at kde

Aug 2, 2023, 12:26 PM

Post #4 of 5 (239 views)

Permalink

On Mittwoch, 2. August 2023 20:53:46 CEST ilf wrote:
> Ingo Kl?cker:
> > Add disable-dirmngr to your gpgsm.conf.
> > This won't disable S/MIME signature verification, but it disables
> > expensive
> > online checks. The alternative in GpgME is
> > https://gnupg.org/documentation/manuals/gpgme/Offline-Mode.html#Offline-Mo
> > de
>
> Thanks. But those sound like they affect OpenPGP, too.
>
> Sorry, I didn't make this explicit in my first mail: But I want to use
> OpenPGP with all features, including Dirmngr. I just don't want to use
> S/MIME.

It shouldn't. OpenPGP is handled by gpg which has it's own config file.
gpgsm.conf is only used by gpgsm which deals with S/MIME.

Regards,
Ingo

Re: GPGME: disable S/MIME (signature verification) [ In reply to ]

ilf at zeromail

Aug 3, 2023, 3:00 AM

Post #5 of 5 (239 views)

Permalink

That seems to work nicely. Thanks!

Ingo Klöcker:
> It shouldn't. OpenPGP is handled by gpg which has it's own config file.
> gpgsm.conf is only used by gpgsm which deals with S/MIME.

--
ilf

If you upload your address book to "the cloud", I don't want to be in it.

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users

Mailing List Archive

Attached Files:

Attached Files: