Scute returning a full chain is confusing signing applications

Damien Goutte-Gattat dgouttegattat at incenp.org
Thu Sep 15 18:53:35 CEST 2022


On Thursday, 15 September 2022 08:46:45 BST Werner Koch wrote:
> I am currently using the t6002 branch which has a couple of small fixes.
> For example commit ca9b9a4d9eed avoids hangs due to broken certificate
> chains (it happens that I have some on my keyring).  I am in general
> satisfied wit the current state of things and that branch will soon be
> merged.

Good to know, I shall redo my tests with that branch.


> I would suggest that for now we use a new option (/etc/gnupg/scute.conf)
> to either enable or disable chain lookups.

Happy with that solution. I'll try to come up with a patch soon.

Best,

- Damien
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.gnupg.org/pipermail/gnupg-devel/attachments/20220915/96434ad9/attachment.sig>


More information about the Gnupg-devel mailing list