With RSCS Smartcards (CardOS / PKCS#15) change passphrase is offered to the user. Clicking it only gives a success message. I do not think that we have implemented any PIN change for PKCS#15 cards. So we could probably detect this and not offer this option. I do not know how to best carry this information to the action restrictions.
Description
Description
Revisions and Commits
Revisions and Commits
| rKLEOPATRA Kleopatra | |||
| rKLEOPATRA5a84623b8d73 Enable "Change Passphrase" action only for secret keys in local keyring | |||
Related Objects
Related Objects
- Mentioned Here
- T5956: Kleopatra: Disable backup secret key for smartcards
Event Timeline
Comment Actions
I think we should simply disable this command for card keys. Card key operations like "Change PIN/passphrase" should be performed via the card key view.
Comment Actions
In fact, the ChangePassphraseCommand uses gpgme_op_passwd which "changes the passphrase of the private key". It doesn't know anything about smart cards.
Fixed by using the new NeedSecretKeyData flag (see T5956: Kleopatra: Disable backup secret key for smartcards).
Comment Actions
I didn't check with a CardOS / PKCS#15 card but as the solution is not card specific, checking with another card should be sufficent.