Page MenuHome GnuPG

GpgOL: Both disable and prefer S/MIME does not work
Closed, InvalidPublic

Description

It looks like the S/MIME settings (disable/prefer) are ignored:
a) Regardless of being disabled, decryption seems to work and pinentry shows up for the smime key
b) Regardless of preference, openpgp keys are used for encryption (when security approval dialog is disabled)

a) To reproduce the disable issue:

  1. Disable smime
  2. Kill background processes and restart Outlook
  3. Open a smime mail => pinentry shows up and mail is decrypted

b) To reproduce the preference issue:

  1. Make sure you have both secret openpgp and smime certs (I tested with ted)
  2. Deactivate "Always show security approval dialog"
  3. Enable S/MIME and activate "Prefer S/MIME"
  4. Kill background processes and restart Outlook (just to be sure)
  5. Send an encrypted/signed mail => always openpgp encrypted/signed

Note: I had both secret openpgp and smime keys of ted/edward in keyring and both accounts in outlook added, if that matters

Details

Version
vsd-3.3.90.16-beta

Event Timeline

(removed: wrong statement)

ebo renamed this task from GpgOL: Activate/Prefer S/MIME does not work to GpgOL: Activate "Prefer S/MIME" does not work.Oct 9 2025, 9:36 AM
ebo triaged this task as High priority.
ebo moved this task from Backlog to Triage on the gpgol board.
timegrid renamed this task from GpgOL: Activate "Prefer S/MIME" does not work to GpgOL: Both disable and prefer S/MIME does not work.Nov 6 2025, 8:57 AM
timegrid updated the task description. (Show Details)
timegrid mentioned this in Unknown Object (Maniphest Task).Nov 6 2025, 3:01 PM

a) Info given by @mmontkowski: decryption can't be disabled

b) sounds like a bug

Could you create a log file, @timegrid?

a) Here's a log anyway (ignore it, if decryption does always work):

Note: If that's the case, the setting label might better be "Enable S/MIME encryption".

b) Another log for the preference setting (smime and pgp key in keyring, smime prefered, pgp mail sent):

mmontkowski moved this task from Triage to Done on the gpgol board.
mmontkowski removed projects: vsd34, vsd.

The problem resulted from a split up key (one for encryption and one for signing) Resulting in no SMIME encryption key found for one recipient and thus falling back to OpenPGP.

See T8089