Patch for userSMIMECertificate

Werner Koch wk at gnupg.org
Fri Jan 28 16:35:19 CET 2005


On Fri, 28 Jan 2005 12:48:54 +0000, Neil Dunbar said:

> attributes within entries while fetching from LDAP, so I've attached a diff 
> against 0.9.0 which adds the capability [Our directory stores 
> userSMIMECertificates to distinguish from our web client certificates].

Thanks, I'll have a look at it.

> Also - I think that line 680 in ldap_wrapper (ldap.c) which reads

ctrl-> refcount++

> should read:

>  if (ctrl) ctrl->refcount++

> since ctrl is not guaranteed to be non-NULL when entering the
> ldap_wrapper 

CTRL should always be initialized; if not I have to check what's
wrong.   I'll check it.

> Now the bad news: I can't get libksba (0.9.10) to parse the PKCS7 blob which 
> makes up a userSMIMECertificate - I just get "unsupported encoding" after the 
> first couple of calls to the PKCS7 parser. So, I had to use GnuTLS as the 

This is likely.  Please give me a few days to fix this; I have a
simliar bug outstanding anyway.


Shalom-Salam,

   Werner




More information about the Gpa-dev mailing list