[mew-dist 27546] Re: gpgsm

2007年 1月 4日 (木) 14:27:16 JST

山本です。

> >> と表示されるのですが，NTTドコモ(guide at example.com)からのメールで，
> >> 
> >> X-Mew: <body> S/MIME sign Unsupported certificate
> >> 
> >> と表示されます。
> >
> >プライバシ上、問題がないメールを僕まで送って頂けませんか？
> 
> これはいかがでしょうか？

gnupg-devel で、対処してもらうようにお願いしました。

--かず

Subject: request for certificate extension
From: Kazu Yamamoto (山本和彦) <kazu at example.com>
To: gnupg-devel at example.com
Date: Thu, 04 Jan 2007 14:25:35 +0900 (JST)

Hello,

DoCoMo, the biggest cellular phone company in Japan, send messages
signed with S/MIME to users. If we verify a signature of a message
from DoCoMo, the verification process fails and the following warning
message is displayed.

----
gpgsm: Signature made 2006-12-22 13:47:37 using certificate ID 64C04082
gpgsm: critical certificate extension 2.5.29.17 is not supported
gpgsm: invalid certification chain: Unsupported certificate
----

I don't know this well, but I found the following in RFC3280:

----
341 06    3:           OBJECT IDENTIFIER subjectAltName (2 5 29 17)
----

If possible, I would request to support this extension.

--Kazu