S/MIME which certificate format

[Werner Koch]

Hi!

This is a bit late for a reply but for the records:

On Tue,  5 Nov 2024 17:11, Marco Moock said:
> m at ryz:~$ gpgsm --show-cert zertifikat-smime/PKCS7_File/PKCS7.p7b
> gpgsm: enabled debug flags: ipc
> gpgsm: enabled compatibility flags:
> gpgsm: ksba_cert_hash failed: Kein Wert
> gpgsm: ksba_cert_hash failed: Kein Wert

Using current GnuPG (master, 2.5.6-beta): I get this:

          ID: 0x520AB3F9
          S/N: 00CDB882CF52A4258A4CB6FA03C415DDBD
        (dec): 273449774896932489317308577343912402365
       Issuer: CN=Sectigo RSA Client Authentication and Secure Email CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GB
      Subject: [error]
          aka: <mm at dorfdsl.de>
     sha2_fpr: DE:DB:58:6F:AA:72:31:A2:91:5C:FC:1E:55:27:77:3C:F0:27:03:DB:28:CB:83:BE:49:15:0A:01:

which sounds okay.

 gpgsm (GnuPG) 2.4.8-beta3
 libgcrypt 1.11.0
 libksba 1.6.7-beta9

works fine as well.  A likely fix was this one in Libksba

  Noteworthy changes in version 1.6.7 (2024-06-21) [C22/A14/R7]
  ------------------------------------------------

   * Allow for an empty Subject in certs.  [T7171]

I assume that you used a 1.6.6 or older.


Salam-Shalom,

   Werner

-- 
The pioneers of a warless world are the youth that
refuse military service.             - A. Einstein
-------------- next part --------------
A non-text attachment was scrubbed...
Name: openpgp-digital-signature.asc
Type: application/pgp-signature
Size: 247 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20250506/76b80b1b/attachment.sig>