Hello together,
While using the tool CurrPorts from NirSoft I saw connections to these servers:
I know that dirmngr.exe is the X.509 certificate revocation list manager of Gpg4win.
But what are these connections?
rvr-prx-148.bayern.de
rvr-prx-149.bayern.de
Welcome to the forum @vpx !
dirmngr.exe is the X.509 certificate revocation list manager
Yes, this is one task of dirmngr, its others are that it handles all internet connections to external systems mainly related towards certificates (and public keys as they are called in OpenPGP terms). This means receiving and sending information (that usually can be public).
But what are these connections?
rvr-prx-149.bayern.de
This could be one distribution point for either certificate revocation lists (CRL) or requests via the online certification status protocol (OSCP). The urls for this are often inside of the certificates, so you could do a
gpgsm --dump-cert | grep rvr-prx and see if this is part of one of the crlDP or other fields.
And if so, dump it into a file and look which certificate it is.
Another possibility to lean more it to enable more diagnostic output in dirmngr and log it to a file. (See the documentation on how to do this.)
Best Regards,
Bernhard