From antonio2 at blia.it Sat Oct 13 20:39:46 2007 From: antonio2 at blia.it (antonio) Date: Sat, 13 Oct 2007 20:39:46 +0200 Subject: dirmngr - unknown critical extensions 2.5.29.28 Message-ID: <200710132039.47159.antonio2@blia.it> Hi, I've had problems loading this crl [1] ... dirmngr[15543]: unknown critical CRL extension 2.5.29.28 dirmngr[15543]: crl_cache_insert via DP failed: Invalid CRL dirmngr[15543]: command ISVALID failed: Invalid CRL ... I've modified crlcache.c and it works, but it is only a temporary solution because I don't know differences between oid 2.5.29.20 (oidstr_crlNumber in crlcache.c) and 2.5.29.28 [2] ... /* Check for unknown critical extensions. */ for (idx=0; !(err=ksba_crl_get_extension (crl, idx, &oid, &critical, NULL, NULL)); idx++) { if (!critical || !strcmp (oid, oidstr_authorityKeyIdentifier) || !strcmp (oid, oidstr_crlNumber) + || !strcmp (oid, "2.5.29.28") ) ... [1] http://ca.cnipa.gov.it/crl3.crl [2] http://www.redhat.com/docs/manuals/cert-system/admin/7.2/Certificate.Extensions.14986.html -- Antonio http://www.blia.it