Page MenuHome GnuPG

Kleopatra: Add new option for allowed PGPKeyTypes
Open, WishlistPublic

Description

This is about a solution for issue behind T7674: Kleopatra: Restore behavior of RSAKeySizes and PGPKeyType on master (KF6), the solution in T7674 was for the legacy kf5 branch only.

On master the new option AllowedPGPKeyTypes should support a list of algorithms (same as gpg's --quick-add-key and --quick-gen-key support). This new name ensures that there is no confusion with the old option PGPKeyType.

PGPKeyType and RSAKeySizes should be migrated to AllowedPGPKeyTypes, i.e. PGPKeyType=RSA + RSAKeySizes=NNN,MMM would become AllowedPGPKeyTypes=rsaNNN,rsaMMM. The old settings PGPKeyType and RSAKeySizes should be left as-is by the migration so that people trying out a beta version don't break the configuration of their production version.

Event Timeline

ebo triaged this task as Normal priority.Jun 16 2025, 12:43 PM
ebo created this task.
ebo renamed this task from Kleopatra: to Kleopatra: Add new option for allowed PGPKeyTypes.Jun 16 2025, 12:56 PM

Shall that be used for key creation or shall a warning be displayed when a non-allowed key is used (receive or send)?

It would be used for key creation just like the legacy options PGPKeyType and RSAKeySizes were used (and still can be used but only for RSA with different key sizes).

ebo lowered the priority of this task from Normal to Wishlist.Mon, Mar 23, 1:56 PM
ebo removed a project: Info Needed.

After talking to Werner I lower the prio as apparently there is no direct customer request for this