Re: [Announce] A New Future for GnuPG

[Ángel]

On 2022-01-03 at 08:19 +0100, Werner Koch wrote:
> Hello and a Happy Gnu Year!
> 
> It has been quite some time since my last status report on GnuPG.  I
> have been quite busy working on the project but unfortunately rarely
> active on the usual channels.  So, here is a new report telling what
> we did over the last two or three years.

I can only say... Congratulations!



___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Gpg4win LetsEncrypt issue

[Alex Nadtoka via Gnupg-users]

yes as well as for me. I was using latest  gpg software


Virus-free.
www.avast.com

<#DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>

чт, 6 січ. 2022 р. о 10:32 Werner Koch  пише:

> Hi!
>
> instead of working around the problem, I strongly suggest to update
> gpg4win to 4.0 or at least install gnupg 2.2.33 on top of an older
> gpg4win.  This fixes the problem without a need to tweak the root cert
> store.
>
>
> Salam-Shalom,
>
>Werner
>
> --
> Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.
>
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Gpg4win LetsEncrypt issue

[Anze Jensterle]

That's the weird thing: I had the new root installed all this time (I
checked multiple times). Only deleting the old intermediates instead of the
root helped. Do you also check all the intermediate paths?
So the path to verify was SERVER->INTERMEDIATE(R3 signed by DST Root)->DST
ROOT, both the SERVER->INTERMEDIATE (R3 signed by ISRG Root X1)->ISRG ROOT
(cross-signed by DST), or the  SERVER->INTERMEDIATE (R3 signed by ISRG Root
X1)->ISRG ROOT (self-signed) never happened.
Best,
Anze

On Thu, Jan 6, 2022 at 3:30 PM Werner Koch  wrote:

> On Thu,  6 Jan 2022 12:02, Anze Jensterle said:
>
> > Any idea why? I suspect it has to do with old intermediates being
> > crosssigned as well.
>
> If you don't have the current LE root certificate the old certification
> path is tried.
>
>
> Shalom-Salam,
>
>Werner
>
> --
> Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.
>
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Gpg4win LetsEncrypt issue

[Werner Koch via Gnupg-users]

On Thu,  6 Jan 2022 12:02, Anze Jensterle said:

> Any idea why? I suspect it has to do with old intermediates being
> crosssigned as well.

If you don't have the current LE root certificate the old certification
path is tried.


Shalom-Salam,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.


signature.asc
Description: PGP signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Gpg4win LetsEncrypt issue

[Anze Jensterle]

Hi Werner,
This was happening to me on the latest 2.3.4 with gpg4win 4.

Any idea why? I suspect it has to do with old intermediates being
crosssigned as well.

Best,
Anze

On Thu, 6 Jan 2022 at 09:41 Werner Koch via Gnupg-users <
gnupg-users@gnupg.org> wrote:

> Hi!
>
> instead of working around the problem, I strongly suggest to update
> gpg4win to 4.0 or at least install gnupg 2.2.33 on top of an older
> gpg4win.  This fixes the problem without a need to tweak the root cert
> store.
>
>
> Salam-Shalom,
>
>Werner
>
> --
> Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.
> ___
> Gnupg-users mailing list
> Gnupg-users@gnupg.org
> http://lists.gnupg.org/mailman/listinfo/gnupg-users
>
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Gpg4win LetsEncrypt issue

[Werner Koch via Gnupg-users]

Hi!

instead of working around the problem, I strongly suggest to update
gpg4win to 4.0 or at least install gnupg 2.2.33 on top of an older
gpg4win.  This fixes the problem without a need to tweak the root cert
store.


Salam-Shalom,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.


signature.asc
Description: PGP signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users