OpenPG/X.509 interoperability

Werner Koch wk at gnupg.org
Mon Oct 31 11:18:15 CET 2005


On Mon, 31 Oct 2005 00:36:13 +0100, Christoph Anton Mitterer said:

> This is perhaps a stupid question but how far are these two standards 
> interoperable?

They are not interoperable.

> Can X.509 certificates be used to sign/certificate OpenPGP UIDs?

No.  You can add a private extension to do so.

> Or can I import the keys as subkeys?

No.

> Or are there any other interoperability issues?

Yes.

> What about the two big "free" X.509" suppliers (CACert and Thawte) do 
> they sign OpenPGP keys?

Don't know.


Shalom-Salam,

   Werner




More information about the Gnupg-users mailing list