public inbox for gentoo-user@lists.gentoo.org
 help / color / mirror / Atom feed
Search results ordered by [date|relevance]  view[summary|nested|Atom feed]
thread overview below | download: 
* Re: [gentoo-user] OpenSSL certificates and Kmail
  @ 2007-05-23 21:57 99%     ` Mick
  0 siblings, 0 replies; 1+ results
From: Mick @ 2007-05-23 21:57 UTC (permalink / raw
  To: gentoo-user

[-- Attachment #1: Type: text/plain, Size: 1722 bytes --]

On Monday 21 May 2007 14:25, Jure Varlec wrote:
> On Sunday 20 of May 2007 20:16:43 Mick wrote:
> > OK, I also tried Validate with CRL and I am now getting a CRL related
> > error: =============================================================

> Now that I checked with some random signed mails on this list, it turns out
> my setup shows exactly the same symptoms as yours, i.e. it can't download
> certain CRLs and cacert's OCP doesn't work. To be frank, what I really
> needed S/MIME to work for are the bills my telco issues through e-mail.
> After installing dimngr and the relevant certificate, kmail recognizes
> signature in their bills correctly.
>
> Funny thing is, kleopatra can and does download certain CRLs correctly
> using URLs embedded in a certificate, but can't do so for some others. And
> even if it can download a CRL, it then can't download the issuer
> certificate which makes it a bit useless. I haven't a clue how to proceed,
> as documentation seems a bit scarce.

Are you sure it is meant to download the issuer certificate?  I assume it may 
do that if you have ticked "Fetch missing issuer certificates" under the 
Kmail preferences, but I am not sure how Kmail would know where to fetch a 
certificate from (unless there's an x509 extension that you can enter when 
creating the certificate?).

> As there are people on this list who use S/MIME signatures I guess it can
> be made to work. Perhaps someone could chime in?

Yes please!  Has anyone managed to get Kmail to work?

BTW, I can report that Kleopatra/gpgsm refuses to import pkcs12 bundles which 
have had a public key encrypted with triple des, instead of the default RC2 
40.
-- 
Regards,
Mick

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

^ permalink raw reply	[relevance 99%]

Results 1-1 of 1 | reverse | options above
-- pct% links below jump to the message on this page, permalinks otherwise --
2007-05-20 11:24     [gentoo-user] OpenSSL certificates and Kmail Mick
2007-05-20 18:16     ` Mick
2007-05-21 13:25       ` Jure Varlec
2007-05-23 21:57 99%     ` Mick

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox