Re: missing root certificate, SMIME spanish government

2019-06-25 Thread Daniel Kahn Gillmor via Gnupg-users
On Sat 2019-06-01 12:14:00 +0200, Uwe Brauer wrote: > In any case I finally solveed the issue by just importing all available > cer into gpgsm and it worked, by mistake was to assume that gpgsm uses > the ones which are installed system wide. I agree that gpgsm integration with the system keyring

Re: missing root certificate, SMIME spanish government

2019-06-03 Thread Werner Koch
On Sat, 1 Jun 2019 14:49, o...@mat.ucm.es said: > Well but if I import the key, then I don't need to add it to the > trustedlist file The trustlist.txt list those certificates which are valid as root certificates. Importing a certificate does not add it to this list for obvious reasons: All kin

Re: missing root certificate, SMIME spanish government

2019-06-01 Thread Uwe Brauer
>>> "WT" == Wolfgang Traylor writes: >> However given a cer file, how can I find out its fingerprint? > This command will show you the details of the certificates from the website[1] > you mentioned including its fingerprint: > openssl x509 -noout -text -fingerprint -inform DER -in downloaded_ke

Re: missing root certificate, SMIME spanish government

2019-06-01 Thread Wolfgang Traylor
> However given a cer file, how can I find out its fingerprint? This command will show you the details of the certificates from the website[1] you mentioned including its fingerprint: openssl x509 -noout -text -fingerprint -inform DER -in downloaded_key_file.cer Or you import the key with `gpgsm

Re: missing root certificate, SMIME spanish government

2019-06-01 Thread Uwe Brauer
>>> "WT" == Wolfgang Traylor writes: Hello > Hello Uwe Brauer, >> I installed all its root certificates in >> /usr/share/ca-certificates/Spain > I usually put the fingerprint of the root certificate in ~/.gnupg/trustlist.txt like this: > ``` > # CN=COMODO RSA Certification Au

Re: missing root certificate, SMIME spanish government

2019-06-01 Thread Wolfgang Traylor
Hello Uwe Brauer, > I installed all its root certificates in > /usr/share/ca-certificates/Spain I usually put the fingerprint of the root certificate in ~/.gnupg/trustlist.txt like this: ``` # CN=COMODO RSA Certification Authority # O=COMODO CA Limited # L=Salford # ST=Greater Manchester # C=G

missing root certificate, SMIME spanish government

2019-05-31 Thread Uwe Brauer
Hi I am not sure that my email arrived via gmane. I received an smime signed email from a colleague. It contains a public key from https://www.sede.fnmt.gob.es/descargas/certificados-raiz-de-la-fnmt Basically the Spanish government. I installed all its root certificates in /usr/share/ca-c