[Bug 1835445] [NEW] mutt can't smime encrypt if the certpath contains ca without CRL

[Hadmut Danisch]

Public bug reported:

Hi,

I'm desperatly trying to encrypt a message to a recipient with mutt and
s/mime, and can't.

Reason:

I've fed the certs into gpgsm, but unfortunately one of the CAs in the
chain does not have a CRL.


Thus, a 

gpgsm  --list-keys --with-validation

fails with

  [certificate is bad: No CRL known]


while a 

gpgsm  --list-keys --with-validation --disable-crl-checks


succeeds.


Unfortunately, there is no (obvious) way to tell mutt to pass this --disable-crl-checks option to the library. 

Thus it seems to be impossible to use mutt to send an encrypted email to
this particular recipient.

ProblemType: Bug
DistroRelease: Ubuntu 18.04
Package: mutt 1.9.4-3ubuntu0.1
ProcVersionSignature: Ubuntu 4.15.0-52.56-generic 4.15.18
Uname: Linux 4.15.0-52-generic x86_64
NonfreeKernelModules: zfs zunicode zavl icp zcommon znvpair
ApportVersion: 2.20.9-0ubuntu7.6
Architecture: amd64
CurrentDesktop: LXDE
Date: Thu Jul  4 18:14:31 2019
InstallationDate: Installed on 2018-04-30 (430 days ago)
InstallationMedia: Lubuntu 18.04 LTS "Bionic Beaver" - Release amd64 (20180426)
SourcePackage: mutt
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: mutt (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug bionic

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to mutt in Ubuntu.
https://bugs.launchpad.net/bugs/1835445

Title:
  mutt can't smime encrypt if the certpath contains ca without CRL

Status in mutt package in Ubuntu:
  New

Bug description:
  Hi,

  I'm desperatly trying to encrypt a message to a recipient with mutt
  and s/mime, and can't.

  Reason:

  I've fed the certs into gpgsm, but unfortunately one of the CAs in the
  chain does not have a CRL.

  
  Thus, a 

  gpgsm  --list-keys --with-validation

  fails with

    [certificate is bad: No CRL known]

  
  while a 

  gpgsm  --list-keys --with-validation --disable-crl-checks

  
  succeeds.

  
  Unfortunately, there is no (obvious) way to tell mutt to pass this --disable-crl-checks option to the library. 

  Thus it seems to be impossible to use mutt to send an encrypted email
  to this particular recipient.

  ProblemType: Bug
  DistroRelease: Ubuntu 18.04
  Package: mutt 1.9.4-3ubuntu0.1
  ProcVersionSignature: Ubuntu 4.15.0-52.56-generic 4.15.18
  Uname: Linux 4.15.0-52-generic x86_64
  NonfreeKernelModules: zfs zunicode zavl icp zcommon znvpair
  ApportVersion: 2.20.9-0ubuntu7.6
  Architecture: amd64
  CurrentDesktop: LXDE
  Date: Thu Jul  4 18:14:31 2019
  InstallationDate: Installed on 2018-04-30 (430 days ago)
  InstallationMedia: Lubuntu 18.04 LTS "Bionic Beaver" - Release amd64 (20180426)
  SourcePackage: mutt
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/mutt/+bug/1835445/+subscriptions