I'm trying to sign something using gpgsm and a smartcard, but here is
what happens:
[EMAIL PROTECTED]:~$ gpgsm --sign -u
BD:5F:80:DE:63:03:4E:C9:E2:84:1E:63:09:55:2E:34:5C:5F:22:6F
dirmngr[21860]: error opening `/home/jas/.gnupg/dirmngr_ldapservers.conf': No
such file or directory
dirmngr[21860]: permanently loaded certificates: 0
dirmngr[21860]: runtime cached certificates: 0
dirmngr[21860]: no CRL available for issuer id
73504958EC804B0DA5501605CFEC58754F0864FE
dirmngr[21860]: crl_fetch via issuer failed: Configuration error
dirmngr[21860]: command ISVALID failed: Configuration error
gpgsm: certificate #4628A165/CN=GnuTLS test CA
gpgsm: checking the CRL failed: Configuration error
gpgsm: can't sign using
`BD:5F:80:DE:63:03:4E:C9:E2:84:1E:63:09:55:2E:34:5C:5F:22:6F': Configuration
error
[EMAIL PROTECTED]:~$
Where do I put the CRL that will be checked?
Alternatively, how can I tell gpgsm/dirmngr to not check any CRL?
Thanks,
Simon
[EMAIL PROTECTED]:~$ gpgsm -K
/home/jas/.gnupg/pubring.kbx
----------------------------
Serial number: 4628A165
Issuer: /CN=GnuTLS test CA
Subject: /CN=Test Key/O=Simon Josefsson
aka: (dns-name josefsson.org)
validity: 2007-04-20 11:17:59 through 2007-10-17 11:18:02
key type: 1024 bit RSA
key usage: digitalSignature keyEncipherment
ext key usage: clientAuth (suggested), serverAuth (suggested)
fingerprint: BD:5F:80:DE:63:03:4E:C9:E2:84:1E:63:09:55:2E:34:5C:5F:22:6F
[EMAIL PROTECTED]:~$ gpgsm -k
/home/jas/.gnupg/pubring.kbx
----------------------------
Serial number: 4628A165
Issuer: /CN=GnuTLS test CA
Subject: /CN=Test Key/O=Simon Josefsson
aka: (dns-name josefsson.org)
validity: 2007-04-20 11:17:59 through 2007-10-17 11:18:02
key type: 1024 bit RSA
key usage: digitalSignature keyEncipherment
ext key usage: clientAuth (suggested), serverAuth (suggested)
fingerprint: BD:5F:80:DE:63:03:4E:C9:E2:84:1E:63:09:55:2E:34:5C:5F:22:6F
Serial number: 46261D27
Issuer: /CN=GnuTLS test CA
Subject: /CN=GnuTLS test CA
validity: 2007-04-18 13:29:11 through 2008-04-17 13:29:11
key type: 1024 bit RSA
key usage: certSign
chain length: unlimited
fingerprint: 15:32:B4:BA:5A:8A:79:88:CA:26:42:83:59:1B:A3:A2:1C:0B:CC:24
[EMAIL PROTECTED]:~$
_______________________________________________
Gnupg-users mailing list
[email protected]
http://lists.gnupg.org/mailman/listinfo/gnupg-users