Re: S/MIME certificates with LDAP-only CRL uri

2023-02-27 Thread Werner Koch via Gnupg-users
Hi! I spent some time looking into this. The CRL is issued by a certificate CN=dgnservice CRL2101 13:PN,O=DGN Deutsches Gesundheitsnetz Service GmbH,C=DE However that certificate is not available: I only found the previous one: ldapsearch -H ldap://ldap.dgnservice.de:389 -b 'O=DGN Deutsch

Re: S/MIME certificates with LDAP-only CRL uri

2023-02-24 Thread Werner Koch via Gnupg-users
On Thu, 23 Feb 2023 18:37, Alexander Grahn said: > Thank your for your reply. Does it mean that the problem is to be solved on > the > GnuPG end? I can't tell because I do not have a valid DGN certificate anymore. Feel free so send me yours by PM - makes debugging easier. Salam-Shalom, Wer

Re: S/MIME certificates with LDAP-only CRL uri

2023-02-23 Thread Alexander Grahn via Gnupg-users
On Thu, Feb 23, 2023 at 04:09:31PM +0100, Werner Koch wrote: > On Thu, 23 Feb 2023 11:22, Alexander Grahn said: > > Should an ldap host answer on ping requests in general? Because the one in > > Pinging arbitrary servers does often work because too many admins tend > to block ICMP echo. An LDAP se

Re: S/MIME certificates with LDAP-only CRL uri

2023-02-23 Thread Werner Koch via Gnupg-users
On Thu, 23 Feb 2023 11:22, Alexander Grahn said: > Should an ldap host answer on ping requests in general? Because the one in Pinging arbitrary servers does often work because too many admins tend to block ICMP echo. An LDAP server is commonly behind some load balancer and thus a ping won't help

Re: S/MIME certificates with LDAP-only CRL uri

2023-02-23 Thread Alexander Grahn via Gnupg-users
On Thu, Feb 23, 2023 at 10:35:38AM +0100, Ingo Klöcker wrote: > On Mittwoch, 22. Februar 2023 16:35:34 CET Alexander Grahn via Gnupg-users > wrote: > > recently I obtained a free certificate from DGN (German Health Net) for > > signing e-mails. I imported the p12 file with gpgsm into my keybox and

Re: S/MIME certificates with LDAP-only CRL uri

2023-02-23 Thread Ingo Klöcker
On Mittwoch, 22. Februar 2023 16:35:34 CET Alexander Grahn via Gnupg-users wrote: > recently I obtained a free certificate from DGN (German Health Net) for > signing e-mails. I imported the p12 file with gpgsm into my keybox and > added the complete certificate chain to ~/.gnupg/trustlist.txt Yo

S/MIME certificates with LDAP-only CRL uri

2023-02-22 Thread Alexander Grahn via Gnupg-users
Hello, recently I obtained a free certificate from DGN (German Health Net) for signing e-mails. I imported the p12 file with gpgsm into my keybox and added the complete certificate chain to ~/.gnupg/trustlist.txt When I try to sign or encrypt, I get the following error: $ gpgsm --armor --sign