Page MenuHome GnuPG

dirmngr should mark hkps hosts as dead on TLS failures
Open, NormalPublic

Description

dirmngr had selected sks.dumain.co.uk (85.119.82.209) as its host for
hkps.pool.sks-keyservers.net. Connections to that host were failing because its
X.509 certificate was expired. However, dirmngr would try that host repeatedly
(and would repeatedly fail).

It seems like such a host should be automatically marked as dead so that at
least subsequent tries will succeed (perhaps the next host should be
automatically re-tried as well).

Details

Version
2.1.15