Page MenuHome GnuPG
Create Task
Maniphest T7697

Okular: No valid smime certs found
Closed, ResolvedPublic
Actions

Description

Split from https://dev.gnupg.org/T7658

Signing of an unsigned document results in an error "all certs invalid or expired", which is not the case in kleopatra:


gpgme log (GPGME_DEBUG=9):

gpgme_log_sign.txt179 KBDownload

gpgsm log (debug x509,ipc,lookup):

okular_signing_gpgsm_log.txt24 KBDownload

To reproduce:

  1. Install gpg4win-5.0.0-beta190.exe
  2. Import via Kleopatra (Drag&Drop): from testzertifikate_2023/
    • g10code-root-ca-2020.crt
    • edward.tester@demo.gnupg.com.p12
    • ted.tester@demo.gnupg.com-sign.p12
    • ted.tester@demo.gnupg.com-encr.p12
  3. Trust the root-ca-2020@gnupg.com root certificate (unless you did so already on import).
  4. Open Okular, run Menu: Extras -> Digital signieren...

Details

Version
gpg4win-5.0.0-beta190

Related Objects

Event Timeline

timegrid triaged this task as Normal priority.Tue, Jun 24, 3:24 PM
timegrid created this task.
timegrid created this object with edit policy "Contributor (Project)".
timegrid mentioned this in T7658: Okular: Dirmngr startup timeout on signature validation.Tue, Jun 24, 3:29 PM
timegrid added a comment.Tue, Jun 24, 3:43 PM

Ingo mentioned some maybe related expiration year 2038+ ticket, but I only found one for kleo: https://dev.gnupg.org/T7069

• ikloecker updated the task description. (Show Details)Tue, Jun 24, 3:59 PM
• ikloecker updated the task description. (Show Details)Tue, Jun 24, 4:02 PM
timegrid updated the task description. (Show Details)Tue, Jun 24, 4:07 PM

added gpgsm log:

okular_signing_gpgsm_log.txt24 KBDownload

timegrid added a comment.Tue, Jun 24, 4:38 PM

I now imported all certs in testzertifikate_2023/ (smime and openpgp) and generated a new one (openpgp, default settings, expiration 2028) and still get no valid signing certs in okular

gpgsm log:

okular_signing_allcerts_gpgsm_log.txt36 KBDownload

gpgme log:

okular_signing_allcerts_gpgme_log.txt248 KBDownload

timegrid closed this task as Resolved.Wed, Jun 25, 12:08 PM
timegrid claimed this task.
timegrid moved this task from Backlog to Done on the gpd5x board.

On gpg4win-5.0.0-beta330 everything works fine again (both smime and openpgp regardless of expiration).