Page MenuHome GnuPG
Create Task
Maniphest T5950

Allow viewing expired certificates more easily
Open, NormalPublic
Actions

Description

[Report re-used as feature request]

Dear gpg users,
I am using the gpg4win on windows 11 OS.
I have imported an public key for another user (user A), and I can see the certificate for user A( first figure)
However, when I try to encrypt a file, I can only encrypt for my own certificate and can not find the certificate for user A in the popped up window (second figure)

I wonder is there anything wrong in my setup or is this a bug in the gpg4win?

Thank you very much for your suggestion.
Best,
Geng

Details

Version
Gpg4win-4.0.0/GnuPG2.3.4/Libgcrypt1.9.4

Related Objects

Event Timeline

geng created this task.Apr 26 2022, 3:59 AM
• ikloecker added a subscriber: • ikloecker.Apr 26 2022, 9:17 AM

I'm afraid we need a bit more information. Please tell us the exact steps how you can reproduce the problem.

Moreover, please make sure that there is no text in the field above the table (in the second figure) because this text is used to filter the displayed certificates.

geng added a comment.Apr 28 2022, 4:05 AM
In T5950#157442, @ikloecker wrote:

I'm afraid we need a bit more information. Please tell us the exact steps how you can reproduce the problem.

Moreover, please make sure that there is no text in the field above the table (in the second figure) because this text is used to filter the displayed certificates.

Dear ikloecker,
Thank you very much for your reply.

I confirmed that I did not put any text (no filter) when I try to encrypt for others.

The steps to reproduce the problem are shown as following:

  1. as you see, I have two certifcates in the main window

  1. then I click the encrypt/sign (in above window), choose the file that to be encrypted, then I came to the windows like this

  1. then I would like also encrypt for the second certifcate I have in the main window. So I click the red cycle above.
  1. I came the window below. As you see, there is no addtional certificate that I would like to use.

Best Wishes,
Geng

• werner added a subscriber: • werner.May 11 2022, 8:59 AM

Please check the 2020 certificate by using the details dialog. Has it a valid encryption subkey?

geng added a comment.May 13 2022, 7:31 AM
In T5950#158024, @werner wrote:

Please check the 2020 certificate by using the details dialog. Has it a valid encryption subkey?

Dear Werner
Thank you very much.
Indeed, the 2020 certificate has expired subkey, and I had to renew the subkey to get it work.
Best,
Geng

• ikloecker added a comment.May 13 2022, 11:05 AM

Thanks.

Maybe we shouldn't exclude expired or revoked keys from the list so that people can still choose them. Of course, those keys wouldn't be accepted to be used for encryption, but it would help people to find out why the keys are not acceptable.

• werner added a comment.May 13 2022, 2:49 PM

But only with an option - in general showing expired keys is annoying. For revoked keys the situation is different in case of a compromise - but many users revoke old keys anyway and we don't make use of the revocation reason. If we would consider the latter the UI/Support would be more complicated than useful.

• werner triaged this task as Normal priority.May 13 2022, 3:38 PM
• werner edited projects, added Feature Request; removed Bug Report.
• werner renamed this task from can not encrypt for others to Allow viewing expired certificates more easily.May 13 2022, 3:40 PM
• werner updated the task description. (Show Details)
• werner edited projects, added kleopatra; removed gpg4win.
• ikloecker added a project: Restricted Project.May 13 2022, 4:22 PM
• ikloecker mentioned this in T6109: Kleopatra: Better way to show expired subkeys.Jul 27 2022, 4:45 PM