Page MenuHome GnuPG

Kleopatra: Configure to hide CSR creation
Closed, ResolvedPublic

Description

We have users now that will only use Kleopatra for OpenPGP. In that case we can already hide S/MIME related actions like the CRL stuff through the kleopatrarc. But we currently do not have a dedicated only PGP Setting. This needs to be added at least for the new key action so that we can skip the protocolselectionpage.

I would like to make this unrelated from actions and generalize a pgpOnly setting so that we can reuse it in other places, too. This might even make more sense to have in libkleopatrarc and not in Kleopatrarc so that it can be shared across clients.

Revisions and Commits

rLIBKLEO Libkleo
rKLEOPATRA Kleopatra

Event Timeline

aheinecke triaged this task as Normal priority.Nov 15 2021, 1:57 PM
aheinecke created this task.
ikloecker moved this task from Restricted Project Column to Restricted Project Column on the Restricted Project board.

The functionality to create CSRs can be hidden with the setting

[CMS]
AllowCertificateCreation=false

The functionality to sign the clipboard content with an S/MIME certificate can be hidden with the setting

[CMS]
AllowSigning=false

All CMS-specific functionality including CMS certificates can be hidden with the setting

[CMS]
Enabled=false
ikloecker changed the task status from Open to Testing.Dec 1 2021, 12:05 PM
ikloecker moved this task from Restricted Project Column to Restricted Project Column on the Restricted Project board.
ikloecker added a subscriber: ikloecker.

I have tried all 3 settings (in %LOCALAPPDATA%\kleopatrarc):

AllowCertificateCreation=false

works as described.

Enabled=false

Hides CRS creation, the choice between OpenPGP and S/MIME in the recipients tab of the notepad and all S/MIME certificates in the certificate list.

AllowSigning=false

Seems to do nothing, it definititly does not hide the choice between OpenPGP and S/MIME in the recipients tab.
Neither given on it's own nor together with AllowCertificateCreation=false

Tested with GnuPG VSD 3.1.25

[CMS]
AllowSigning=false

hides the S/MIME-Sign... entry in the Clipboard menu (in the Tools menu and the context menu of the system tray icon).

ebo claimed this task.

ok, works as described.