command 'ISVALID' failed: Not supported when using OCSP validation for S/MIME

[Ingo Klöcker]

On Freitag, 14. Juni 2024 14:52:43 CEST Marco Moock wrote:
> If I enable OCSP checking for S/MIME in Kleopatra, the check fails and
> that affects software that uses the S/MIME certificates/keys.
> 
> dirmngr[30845.5]: command 'ISVALID' failed: Nicht unterstützt
> 					    ^^^--> not 
supported
> 
> Is that an issue of gpgsm, Kleopatra or the client (Claws mail in this
> case)?

I had a quick look and found
---
GPG_ERR_NOT_SUPPORTED
    This is commonly seen if OCSP support has not been enabled in the 
configuration. 
---
https://gnupg.org/documentation/manuals/gnupg/Dirmngr-ISVALID.html

Is OCSP enabled in the configuration of dirmngr? I think there needs to be an 
`allow‐ocsp` in dirmngr.conf. Maybe Kleopatra fails to enable it correctly.

The experts for this stuff can be reached via the gnupg-users mailing list.

Regards,
Ingo
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: This is a digitally signed message part.
URL: <http://mail.kde.org/pipermail/kdepim-users/attachments/20240614/30e76925/attachment.sig>