[Gpg4win-users-en] "Certificate expired" still happens after GnuPG is updated to 2.2.32

[Bernhard Reiter]

Hi,

Am Mittwoch 20 Oktober 2021 18:11:52 schrieb Yasuhiro Kimura:
> At first I added "verbose" and a "log-file" to dirmngr.conf

and the log says that you are contacting 'keyserver.ubuntu.com'
and somehow you miss the new root certificate of Let's encrypt (LE).

You should be able to import it into the Windows certification store.
Alternatively you can manually import it into GnuPG. (Using kleopatra or gpgms 
on the command line I think.)
 
Raising the debug level will (most likely) show you that the new Let's encrypt 
root certificate is not coming from the windows store (where it should be in, 
according to LE).

> resolve_dns_addr for 'keyserver.ubuntu.com': '162.213.33.8' 2021-10-21

> 2021-10-21 01:07:10 dirmngr[19204] certificate has expired
> 2021-10-21 01:07:10 dirmngr[19204] (expired at 2021-09-29 19:21:40)
> 2021-10-21 01:07:10 dirmngr[19204] Note: non-critical certificate policy

Best Regards,
Bernhard

-- 
www.intevation.de/~bernhard   +49 541 33 508 3-3
Intevation GmbH, Osnabrück, DE; Amtsgericht Osnabrück, HRB 18998
Geschäftsführer Frank Koormann, Bernhard Reiter, Dr. Jan-Oliver Wagner
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 659 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.wald.intevation.org/pipermail/gpg4win-users-en/attachments/20211026/b6346883/attachment.sig>