[issue188] Problems with unavailable CRL

[Jan-Oliver Wagner]

New submission from Jan-Oliver Wagner <jan at intevation.de>:

Case1:
For a (expired) cert I tried the validate method
in Kleopatra.
The corresponding CRL was outdated and the new
one was not retrievable because missing on the LDAP
server.
The log said "Assuan procesing failed: Write error
in gpgsm".

Case2:
In KMail the same problem has a more serious effect:
Checking the signature, the non-available CRL is
tried to be fetched forever.
I configure a timeout of 10 secs, but even after
minutes the process did not return. KMail simply hangs.

Is there a general problem with updating CRLs if the
updates are actually unavailable? Shouldn't be there
a logic that says: OK, so lets stick with the old
CRL meanwhile. ?

----------
assignedto: werner
messages: 939
nosy: jan, werner
priority: urgent
status: unread
title: Problems  with unavailable CRL
topic: DirMngr, gpgsm
______________________________________________________
Aegypten issue tracker <aegypten-issues at intevation.de>
<https://intevation.de/roundup/aegypten/issue188>
______________________________________________________