Page MenuHome GnuPG

Kleopatra: p15 widget for S/MIME cards
Open, NormalPublic

Description

Both the RSCS and the Genua Smarcards can have S/MIME certificates on them which are usable for mail encryption and signing. Currently we only display OpenPGP key information which in the case of the Genua Smartcards is wrong.

We probably need a way to mix in the netkey widget into the p15 widget with the tools for generating an openpgp key for an S/MIME key and to show the S/MIME keys.

For the RSCS Smartcards we should be able to detect usable certificates depending on the usage of the certificate and if it is not ignored by GPGSM.

In the GnuPG VS-Desktop configuration we ignore:

ignore-cert-with-oid 1.3.6.1.4.1.11591.2.6.1
ignore-cert-with-oid 1.3.6.1.4.1.11591.2.6.2
ignore-cert-with-oid 1.3.6.1.4.1.11591.2.6.3
ignore-cert-with-oid 1.3.6.1.4.1.11591.2.6.4
ignore-cert-with-oid 1.3.6.1.4.1.30205.13.1.1
ignore-cert-with-oid 1.3.6.1.4.1.30205.13.1.5
ignore-cert-with-oid 1.3.6.1.4.1.30205.13.1.6
ignore-cert-with-oid 1.3.6.1.4.1.311.20.2.2

Event Timeline

aheinecke triaged this task as Normal priority.May 9 2022, 10:45 AM
aheinecke created this task.