On Friday, October 25, 2013 03:30:35 AM Stefan Gofferje wrote:
Addition:
On 10/25/2013 02:22 AM, r.ted.byers@gmail.com wrote:
(or does your government have a website set up, with the URL provided
in the crt file, from which websites can retrieve the files related to the crt, that they can use to access the validity of the crt file)?
If you open my certificate in the certificate viewer, check the path certificate/extensions!
There you'll find among others:
Authority information access: URI: http://proxy.fineid.fi/ca/vrkcqc.crt
I installed the above crt on my system
and
CRL Distribution Points: URI: http://proxy.fineid.fi/crl/vrkcqcc.crl But my system refused to install the CRL
Besides, it can also be that KMail is nagging because my certificate does not contain any email-address, because it's a personal identification certificate and no dedicated email-signing certificate.
I am appending the output from Kmail below, but unless I have misunderstood this output, it seems that the root and issuer certificates are missing (which probably means I need to install more CRT files). BTW: How do I examine the CRT you attach to your email. Kmail seems to know automagically what to do, but I don't. Thanks Ted =========KMail's assessment of your signature==================== * Data verification succeeded Yes * Data available Yes * Signature available Yes * Parsing data succeeded Yes * (data hash algorithm: SHA1) * Signature 0 Bad * (#3BB20FC9/CN=VRK Gov. CA for Citizen Qualified Certificates,OU=Valtion kansalaisvarmenteet,O=Vaestorekisterikeskus CA,ST=Finland,C=FI) * (data hash algorithm: SHA1) * (attr hash algorithm: SHA1) * Certificate chain available Yes * (root certificate missing) * (#018899/CN=VRK Gov. Root CA,OU=Varmennepalvelut,OU=Certification Authority Services,O=Vaestorekisterikeskus CA,ST=Finland,C=FI) * (/CN=VRK Gov. CA for Citizen Qualified Certificates,OU=Valtion kansalaisvarmenteet,O=Vaestorekisterikeskus CA,ST=Finland,C=FI) * (#3BB20FC9/CN=VRK Gov. CA for Citizen Qualified Certificates,OU=Valtion kansalaisvarmenteet,O=Vaestorekisterikeskus CA,ST=Finland,C=FI) * (/CN=GOFFERJE STEFAN 160337646,2.5.4.4=#474F464645524A45,2.5.4.42=#53544546414E,2.5.4.5=#313630333337363436,C=FI) * Certificate chain valid No * (Missing issuer certificate) * CRL/OCSP check of certificates Good * Included certificates 2 * (#3BB20FC9/CN=VRK Gov. CA for Citizen Qualified Certificates,OU=Valtion kansalaisvarmenteet,O=Vaestorekisterikeskus CA,ST=Finland,C=FI) * (/CN=GOFFERJE STEFAN 160337646,2.5.4.4=#474F464645524A45,2.5.4.42=#53544546414E,2.5.4.5=#313630333337363436,C=FI) * (#018899/CN=VRK Gov. Root CA,OU=Varmennepalvelut,OU=Certification Authority Services,O=Vaestorekisterikeskus CA,ST=Finland,C=FI) * (/CN=VRK Gov. CA for Citizen Qualified Certificates,OU=Valtion kansalaisvarmenteet,O=Vaestorekisterikeskus CA,ST=Finland,C=FI) * Dirmngr usable Yes -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org