Page MenuHome GnuPG

Make ADSK configurable for new keys
Open, NormalPublic

Description

The usecase for ADSK is mostly that in an organisation the Admistration will set an ADSK throgh the Windows registry for new keys. So T6879: Kleopatra: Add support for adding an ADSK is more of a fallback for existing keys. We should read that from the config when generating a new key, Similar to T6881: Kleopatra: Make designated revoker configurable for new keys and automatically add such a subkey for newly generated keys if it is configured.

Event Timeline

TobiasFella moved this task from Restricted Project Column to Restricted Project Column on the Restricted Project board.Jan 23 2024, 11:42 AM
ikloecker set External Link to https://invent.kde.org/pim/kleopatra/-/merge_requests/94.May 8 2024, 10:15 AM
werner renamed this task from Kleopatra: Make ADSK configurgurable for new keys to Make ADSK configurgurable for new keys.May 22 2024, 6:18 PM
werner removed TobiasFella as the assignee of this task.
werner edited projects, added gnupg22; removed kleopatra.
werner added a subscriber: TobiasFella.
werner added a subscriber: werner.

This should not be configured in Kleopatra but an option to gpg because this is a core crypto functionality. Thus is now a gpg task.

Now also with support for --quick-add-adsk in 2.6. This will work also for gpgme without further changes.

ikloecker renamed this task from Make ADSK configurgurable for new keys to Make ADSK configurable for new keys.Jun 7 2024, 2:49 PM

It would be helpful if gpgconf --list-options gpg listed the default-new-key-adsk option so that Kleopatra knows whether the option is set.

Backported to 2.4. Options are now listed with gpgconf.