Can't verify Thawte S/MIME message

Werner Koch wk@gnupg.org
Thu Sep 11 20:58:01 2003


On Thu, 11 Sep 2003 14:26:30 -0400, Jason Harris said:

> Is that because their certificates aren't encoded in their signatures,
> or because you lack all the Thawte root certificates?  If the former, is

IIRC, this is due to a lack of the authorityKeyIdentifier and that
gpgsm currently assumes that there is only one root CA certificate
with a given Issuer Name - its on my todo list to check all available
root certs.

-- 
Werner Koch                                      <wk@gnupg.org>
The GnuPG Experts                                http://g10code.com
Free Software Foundation Europe	                 http://fsfeurope.org