S/MIME stopped working

[isdtor]

All,

My S/MIME setup has died one from day to the next and I cannot find out why.

Symptom: trying to send e.g. signed email, the result is

error signing data: No CRL known?

TBH this looks more like a gpg than a mutt problem, and I haven't figured out how to debug this. Same error for encrypting.

Everything in the tool chain is at the latest version - mutt, gpg and components, openssl. I have verified that my certificate is not expired (years in the future) and that the crl is accessible by wget/curl. mutt in debug mode does not give any additional information, and I can't make much sense of an strace -f log either. The same certificate and process works just fine in thunderbird on the same machine.

Any ideas?