CRL loading error

Luca M. G. Centamore luca.centamore at inps.it
Fri Oct 10 16:04:49 CEST 2003


Hi all,
I'm experiencing the following error when I try to load the Thawte CRL:

[luca at p27250000 luca]$ gpgsm --call-dirmngr LOADCRL \ 
cert/x509/ThawtePersonalFreemailIssuingCA.crl

Secure memory is not locked into core
dirmngr[8087]: DBG: digest algo: 1.2.840.113549.1.1.4
dirmngr[8087]: DBG: Inquiring 
1.2.840.113549.1.9.1=#706572736F6E616C2D667265656D61696C407468617774652E636F6D,CN=Thawte 
Personal Freemail CA,OU=Certification Services Division,O=Thawte 
Consulting,L=Cape Town,ST=Western Cape,C=ZA
dirmngr[8087]: Error in assuan_inquire(), rc = 3
dirmngr[8087]: DBG: No result from inquire
dirmngr[8087]: error fetching certificate for issuer: rc=302
dirmngr[8087]: DBG: Could not cert CRL issuer cert!!!
dirmngr[8087]: DBG: crl_parse_insert CRL_SIG_ERROR
gpgsm: response of dirmngr: bad signature


I looked at the mailing list and I read the thread "Attempt to verify Thawte 
signature" reporting and solving(?) the very same error. What I 
(mis?)understood is that:
1) dirmngr is using some code _copied_from libassuan which was at fault. A fix 
was released on CVS but it seemed not to appear in the release;
2) it should use the static linked library instead, but I wasn't able to 
understand whether this feature was released in a new version or not;

I'm using:
gnupg-1.9.1
dirmngr-0.4.5
libassuan-0.6.0

Best regards
Luca




More information about the Gpa-dev mailing list