Maniphest T4898

auto import CA certs with authInfo.caIssuers
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	• werner
	Mar 31 2020, 12:04 PM

Tags

Subscribers

Description

We need to see whether we want to do this only for intermediate CA or also for Root CAs.

Revisions and Commits

rG GnuPG
	rGaec7d136e4bd sm: Always allow authorityInfoAccess lookup if CRLs are also enabled.
	rGbbb7edb8807b sm: Always allow authorityInfoAccess lookup if CRLs are also enabled.
	rGd57209553da7 sm: Lookup missing issuers first using authorityInfoAccess.
	rGf5efbd5a1169 sm: Lookup missing issuers first using authorityInfoAccess.

Related Objects

Mentioned In: T4897: Release GnuPG 2.2.21

Event Timeline

• werner triaged this task as Normal priority.Mar 31 2020, 12:04 PM

• werner created this task.

We do this now always if --auto-issuer-key-retrieve is set. Also backported to 2.2

• werner added a commit: rGf5efbd5a1169: sm: Lookup missing issuers first using authorityInfoAccess..Apr 16 2020, 6:05 PM

• werner added a commit: rGd57209553da7: sm: Lookup missing issuers first using authorityInfoAccess..Apr 16 2020, 6:07 PM

• werner added a commit: rGbbb7edb8807b: sm: Always allow authorityInfoAccess lookup if CRLs are also enabled..Apr 16 2020, 7:07 PM

• werner added a commit: rGaec7d136e4bd: sm: Always allow authorityInfoAccess lookup if CRLs are also enabled..

• werner mentioned this in T4897: Release GnuPG 2.2.21.Jul 9 2020, 1:13 PM