gpgsm: Cert trouble GPG_ERR_NO_VALUE for GTE CyberTrust Global Root

[Werner Koch]

On Fri,  3 Apr 2009 13:21, bernhard at intevation.de said:

> Looks like some check in gpg-agent rejects that certificate.
> gpg-agent[4432.8] DBG: <- ISTRUSTED 97817950D81C9670CC34D809CF794431367EF474
> gpg-agent[4432.8] DBG: -> ERR 67108962 Nicht vertrauenswürdig <GPG Agent>

That merely means that the certificate is not in the trustlist.txt.

> Some user reported that "relax" for the trustlist.txt might help, I am going 
> to test this next. Already the documentation for what relax does is a bit 
> fuzzy on this and so is the status message. "Not trusted, failing check" 

This is on purpose, so that we can disable one or the other check
without being required to stick to it with the next release of GnuPG.
The certifictate is broken and relax is just a workaround.


Salam-Shalom,

   Werner

-- 
Die Gedanken sind frei.  Auschnahme regelt ein Bundeschgesetz.