From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/75356 Path: news.gmane.org!not-for-mail From: David Engster Newsgroups: gmane.emacs.gnus.general Subject: Re: How do I configure a CA? Date: Tue, 21 Dec 2010 09:45:14 +0100 Message-ID: References: <8739pseujz.fsf@member.fsf.org> <87mxnzzfov.fsf@member.fsf.org> NNTP-Posting-Host: lo.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: dough.gmane.org 1292921143 5429 80.91.229.12 (21 Dec 2010 08:45:43 GMT) X-Complaints-To: usenet@dough.gmane.org NNTP-Posting-Date: Tue, 21 Dec 2010 08:45:43 +0000 (UTC) To: ding@gnus.org Original-X-From: ding-owner+M23708@lists.math.uh.edu Tue Dec 21 09:45:35 2010 Return-path: Envelope-to: ding-account@gmane.org Original-Received: from util0.math.uh.edu ([129.7.128.18]) by lo.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1PUxqf-0006Y5-WE for ding-account@gmane.org; Tue, 21 Dec 2010 09:45:34 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.math.uh.edu) by util0.math.uh.edu with smtp (Exim 4.63) (envelope-from ) id 1PUxqZ-0002GW-2G; Tue, 21 Dec 2010 02:45:27 -0600 Original-Received: from mx2.math.uh.edu ([129.7.128.33]) by util0.math.uh.edu with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from ) id 1PUxqX-0002GI-IR for ding@lists.math.uh.edu; Tue, 21 Dec 2010 02:45:25 -0600 Original-Received: from quimby.gnus.org ([80.91.231.51]) by mx2.math.uh.edu with esmtp (Exim 4.72) (envelope-from ) id 1PUxqW-00006R-FR for ding@lists.math.uh.edu; Tue, 21 Dec 2010 02:45:25 -0600 Original-Received: from v3-1008.vxen.de ([79.140.41.8]) by quimby.gnus.org with esmtp (Exim 4.72) (envelope-from ) id 1PUxqV-0003wz-Bg for ding@gnus.org; Tue, 21 Dec 2010 09:45:23 +0100 Original-Received: from [134.76.4.238] (helo=imac.local) by v3-1008.vxen.de with esmtpsa (TLS1.0:DHE_RSA_AES_128_CBC_SHA1:16) (Exim 4.69) (envelope-from ) id 1PUxqS-0002wT-OJ for ding@gnus.org; Tue, 21 Dec 2010 09:45:20 +0100 In-Reply-To: <87mxnzzfov.fsf@member.fsf.org> (Tassilo Horn's message of "Tue, 21 Dec 2010 09:35:28 +0100") User-Agent: Gnus/5.110011 (No Gnus v0.11) Emacs/24.0.50 (darwin) Mail-Copies-To: never Mail-Followup-To: ding@gnus.org X-Spam-Score: -1.9 (-) List-ID: Precedence: bulk Xref: news.gmane.org gmane.emacs.gnus.general:75356 Archived-At: Tassilo Horn writes: > Lynbech Christian writes: > > Hi Christian, > >> Depending on whether you actually need some fancy S/MIME stuff, you >> could try just setting >> >> (setq smime-certificate-directory (concat nnml-directory "certs/") >> smime-CA-directory nil >> smime-CA-file "/usr/share/qca/certs/rootcerts.pem") > > Hey, cool. After setting > > (setq smime-certificate-directory (expand-file-name "certs" gnus-home-directory) > ;; openssl certificates > smime-CA-directory "/etc/ssl/certs" > ;; Uni Koblenz root certificate > smime-CA-file "~/.certs/g_rootcert.crt") > > I'm able to view that one mail, and I even don't get any warnings. Ah. I just realized that your message was not really encrypted, but just signed. Then the openssl setup is indeed much easier. The message "Decrypt (S/MIME) part?" is - while technically correct - rather misleading. -David