Using S/MIME encryption with self-signed certificates

[Werner Koch]

On Fri,  2 Jul 2010 13:21, fweimer at bfk.de said:
> Is it possible to use gpgsm to encrypt data for a self-signed X.509
> certificate?  Right now, the program bails out with "issuer
> certificate is not marked as a CA", and I would like to work around
> that, preferably without running a full CA.

Add the keyword "relax" to ~/.gnupg/trustlist.txt and give the agent a
HUP (or run "gpgconf --reload gpg-agent").  Example line:

  1122334455667788990011223344556677889900 S relax



Shalom-Salam,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.