CRL loading error
Luca M. G. Centamore
luca.centamore at inps.it
Fri Oct 10 16:04:49 CEST 2003
Hi all,
I'm experiencing the following error when I try to load the Thawte CRL:
[luca at p27250000 luca]$ gpgsm --call-dirmngr LOADCRL \
cert/x509/ThawtePersonalFreemailIssuingCA.crl
Secure memory is not locked into core
dirmngr[8087]: DBG: digest algo: 1.2.840.113549.1.1.4
dirmngr[8087]: DBG: Inquiring
1.2.840.113549.1.9.1=#706572736F6E616C2D667265656D61696C407468617774652E636F6D,CN=Thawte
Personal Freemail CA,OU=Certification Services Division,O=Thawte
Consulting,L=Cape Town,ST=Western Cape,C=ZA
dirmngr[8087]: Error in assuan_inquire(), rc = 3
dirmngr[8087]: DBG: No result from inquire
dirmngr[8087]: error fetching certificate for issuer: rc=302
dirmngr[8087]: DBG: Could not cert CRL issuer cert!!!
dirmngr[8087]: DBG: crl_parse_insert CRL_SIG_ERROR
gpgsm: response of dirmngr: bad signature
I looked at the mailing list and I read the thread "Attempt to verify Thawte
signature" reporting and solving(?) the very same error. What I
(mis?)understood is that:
1) dirmngr is using some code _copied_from libassuan which was at fault. A fix
was released on CVS but it seemed not to appear in the release;
2) it should use the static linked library instead, but I wasn't able to
understand whether this feature was released in a new version or not;
I'm using:
gnupg-1.9.1
dirmngr-0.4.5
libassuan-0.6.0
Best regards
Luca
More information about the Gpa-dev
mailing list