1
0
mirror of git://git.gnupg.org/gnupg.git synced 2024-12-23 10:29:58 +01:00
Werner Koch 3efc94f1eb
dirmngr,gpg: Better diagnostic in case of bad TLS certificates.
* doc/DETAILS: Specify new status code "NOTE".
* dirmngr/ks-engine-http.c (ks_http_fetch): Print a NOTE status for a
bad TLS certificate.
* g10/call-dirmngr.c (ks_status_cb): Detect this status.
--

For example a

  gpg -v --locate-external-keys dd9jn@posteo.net

now yields

  gpg: Note: server uses an invalid certificate
  gpg: (further info: bad cert for 'posteo.net': \
                      Hostname does not match the certificate)
  gpg: error retrieving 'dd9jn@posteo.net' via WKD: Wrong name
  gpg: error reading key: Wrong name

(without -v the "further info" line is not shown).  Note that even
after years Posteo is not able to provide a valid certificate for
their .net addresses.  Anyway, this help to show the feature.

Signed-off-by: Werner Koch <wk@gnupg.org>
2019-11-18 18:44:36 +01:00
..
2014-12-14 12:15:21 +01:00
sm/
2006-11-14 10:23:21 +00:00
2016-09-20 09:32:25 +09:00
DCO
2013-04-17 11:26:27 +02:00
2016-12-13 17:30:55 +01:00
2019-05-03 16:15:54 +02:00
2003-01-09 13:24:01 +00:00
2016-09-20 09:56:22 +09:00
2010-06-10 10:39:44 +00:00
2007-07-04 19:49:40 +00:00
2007-03-08 18:31:56 +00:00
2014-07-03 11:03:22 +02:00
2019-02-28 11:00:31 +01:00
2017-12-08 07:40:06 +01:00
2007-05-08 13:59:41 +00:00
2006-08-21 20:20:23 +00:00
2016-09-17 16:00:37 +09:00
2016-09-20 09:56:22 +09:00
2008-06-25 11:14:48 +00:00
2012-11-30 12:47:49 -05:00
2018-06-06 17:26:20 +02:00
2011-08-12 14:40:47 +02:00
2019-07-11 21:27:59 -04:00
2017-02-21 13:11:46 -05:00
2006-12-06 16:38:34 +00:00
2017-08-28 11:18:26 +02:00
2019-05-28 21:09:13 -04:00