Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: GnuPG: devel

trust field for CMS (was: empty trust field for --with-colons and CMS)

 

 

GnuPG devel RSS feed   Index | Next | Previous | View Threaded


bernhard at intevation

Aug 21, 2008, 7:20 AM

Post #1 of 2 (164 views)
Permalink
trust field for CMS (was: empty trust field for --with-colons and CMS)

On Wednesday 13 August 2008 17:09, Werner Koch wrote:
> On Wed, 13 Aug 2008 15:55, bernhard[at]intevation.de said:
> > LANG=C gpgsm --with-validation --with-colons --list-keys
> > bernhard[at]intevation.de
> >
> > crt::2048:1:3B85F74F46C65E78:20080619T084325:20100619T084325:06::CN=ZS
> > 8,O=Intevation GmbH,C=DE::escESC:
>
> Okay, I fixed that in svn revision 4813.
>
>             For X.509 certificates an 'u' is used for a trusted root
>             certificate (i.e. for the trust anchor) and an 'f' for all
>             other valid certificates.

What about using 'm' in CMS (X.509) to indicate that
--disable-crl-checks OR --disable-policy-checks is active?

It would trigger a question with many gpgme using applications
which IMO would be correct in the situation.


--
Managing Director - Owner: www.intevation.net (Free Software Company)
Germany Coordinator: fsfeurope.org. Coordinator: www.Kolab-Konsortium.com.
Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB 18998
Geschäftsführer Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner
Attachments: smime.p7s (1.57 KB)


bernhard at intevation

Sep 1, 2008, 5:27 AM

Post #2 of 2 (122 views)
Permalink
Re: trust field for CMS (was: empty trust field for --with-colons and CMS) [In reply to]

On Thursday 21 August 2008 16:20, Bernhard Reiter wrote:
> On Wednesday 13 August 2008 17:09, Werner Koch wrote:
> > On Wed, 13 Aug 2008 15:55, bernhard[at]intevation.de said:
> > > LANG=C gpgsm --with-validation --with-colons --list-keys
> > > bernhard[at]intevation.de
> > >
> > > crt::2048:1:3B85F74F46C65E78:20080619T084325:20100619T084325:06::CN=ZS
> > > 8,O=Intevation GmbH,C=DE::escESC:
> >
> > Okay, I fixed that in svn revision 4813.
> >
> >             For X.509 certificates an 'u' is used for a trusted root
> >             certificate (i.e. for the trust anchor) and an 'f' for all
> >             other valid certificates.
>
> What about using 'm' in CMS (X.509) to indicate that
> --disable-crl-checks OR --disable-policy-checks is active?
>
> It would trigger a question with many gpgme using applications
> which IMO would be correct in the situation.

Ping.

--
Managing Director - Owner: www.intevation.net (Free Software Company)
Germany Coordinator: fsfeurope.org. Coordinator: www.Kolab-Konsortium.com.
Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB 18998
Geschäftsführer Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner

GnuPG devel RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact lists@gossamer-threads.com
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.