Kleopatra: Integrate "disabled" feature from gpg
Testing, NormalPublic
Actions

Assigned To

None

Authored By

	• ebo
	Jul 24 2024, 8:52 AM

Description

(Task originally authored by alexk, see https://dev.gnupg.org/T7089#188791 for reason to recreate it)

There is a long available feature to "disable" keys in GnuPG. This deactivates the local certificate for regular use. Kleopatra should respect this as well:

In certificate view show "disabled" (de: "inaktiv") in the "User-IDs" column.
In certificate view add "disable" or "enable" in the context menu.
In "Details" view add "disabled" in bold next to "Valid until" in case it is disabled.
When searching for certificates in "Encrypt for" fields, don't show disabled keys in the drop-down menu.
A (context) menu entry to "disable certificate" (or "enable certificate").

And either:

make a filter showing "disabled certificates".
don't show disabled certificates in any of the others filters.

make a toggle to show/hide "disabled certificates" everywhere

Info: The "disabled" status is stored in the trust-DB. It can be changed with "gpg -edit-key" and "disable".

Related Objects
Search...

Status	Assigned	Task
Testing	None	T7216 Kleopatra: Integrate "disabled" feature from gpg
Resolved	• TobiasFella	T7089 Kleopatra: show "disabled" status
Resolved	• TobiasFella	T7217 Kleopatra: Create an appearance filter for the "disabled" status
Testing	• TobiasFella	T7234 Kleopatra: add disable/enable certificate in context menu
Resolved	• ikloecker	T7239 GpgME: Add job for disabling/enabling a certificate
Resolved	• TobiasFella	T7296 Kleopatra: Change filters "All certificates" etc. so that they do not include disabled ones
Invalid	None	T7300 Kleopatra: change filter tool tips to sentence case

Event Timeline

• ebo triaged this task as Normal priority.Jul 24 2024, 8:52 AM

• ebo created this task.

• ebo added a subtask: T7089: Kleopatra: show "disabled" status.

• ebo mentioned this in T7089: Kleopatra: show "disabled" status.Jul 24 2024, 9:50 AM

• ebo updated the task description. (Show Details)Jul 24 2024, 10:11 AM

• aheinecke closed subtask T7217: Kleopatra: Create an appearance filter for the "disabled" status as Wontfix.Jul 24 2024, 11:04 AM

Kleopatra of course respects the disabled status because GnuPG does so. But what is the usecase for further extending this?

Before I understande the use case I cannot Triage this. For me disabled is only ever useful in case you have auto imports and for some reason whatsoever do not want or cannot locally sign a certificate. In that case you have two untrusted certificates and can disable one of them to ensure that the other untrusted certificate is used.
This is rare.

But I am not ruling out that there is a Use-Case I do not yet see or understand.

BTW, gpgme does not yet use --quick-set-ownertrust which can also be used to set the disabled flag. We should replace the interactor by the new command. See rG21f7ad563d for the new command.

• ebo reopened subtask T7217: Kleopatra: Create an appearance filter for the "disabled" status as Open.Jul 31 2024, 4:04 PM

• TobiasFella changed the status of subtask T7217: Kleopatra: Create an appearance filter for the "disabled" status from Open to Testing.Aug 5 2024, 11:40 AM

• TobiasFella changed the status of subtask T7234: Kleopatra: add disable/enable certificate in context menu from Open to Testing.Aug 12 2024, 1:51 PM