S/MIME which certificate format

[Werner Koch]

On Tue,  6 May 2025 17:11, Marco Moock said:

> libksba8:amd64 1.6.7-2+b1
> gnupg          2.4.7-17

I can only say that it works for me using slighly newer versions.  I
also doubt that your gpgsm's behaviour this is due to the many Debian
patches.  

> If needed, I can try to build other versions, but this takes time as I
> have to create Debian packets first. Most systems need gnupg and I
> can't manually build and install it, as is breaks the dependency system.

May I suggest to build gnupg 2.5.5 using the speedo system. This allows
you to test it all independently of the system's software.  Below are
the instructions from the README.  To avoid problems with systemd trying
to start a different gpg-agent you should run your tests in a new shell:

  cd /some/test/dir
  GNUPGHOME='pwd' /usr/local/gnupg26/bin/gpg-agent --daemon bash

Setting the homedir make sure that a different socket is used for IPC
and thus leaves systemd out of the game.  You may do this als with 2.4.7
but I am not 100% sure that the speedo works as well as ot does for 2.5.5.



Shalom-Salam,

   Werner


========
** Quick build method on Unix

  To quickly build all required software without installing it, the
  Speedo target may be used.  But first you need to make sure that the
  toolchain is installed.  On a Debian based system it should be
  sufficient to run as root:

    apt-get install build-essential libusb-1.0-0-dev libsqlite3-dev patchelf

  Then as regular user run

    make -f build-aux/speedo.mk native

  This target downloads all required libraries and does a native build
  of GnuPG to PLAY/inst/.  After the build the entire software
  including all libraries can be installed into an arbitrary location
  using for example:

    make -f build-aux/speedo.mk install SYSROOT=/usr/local/gnupg26

  and run the binaries like

    /usr/local/gnupg26/bin/gpg

  which will also start any daemon from the same directory.  Make sure
  to stop already running daemons or use a different GNUPGHOME.

  If you want to use the gnupg-w32-n.m.n_somedate.tar.xz tarball you
  only need to change the first make invocation to

      make -f build-aux/speedo.mk this-native

  The advantage of this alternative tarball is that all libraries are
  included and thus the Makefile does not need to download new
  tarballs.  Note that in any case all downloaded files come with
  signatures which are verified by the Makefile commands.  The
  patchelf command is required to change the search path for the
  shared libraries in the binaries to relative directories.




-- 
The pioneers of a warless world are the youth that
refuse military service.             - A. Einstein
-------------- next part --------------
A non-text attachment was scrubbed...
Name: openpgp-digital-signature.asc
Type: application/pgp-signature
Size: 247 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gnupg-users/attachments/20250507/169904df/attachment.sig>