Page MenuHome GnuPG

Kleopatra: Unsupported backup of secret kyber key should be handled more gracefully
Open, Needs TriagePublic

Description

On export of a kyber key via CLI, the error message is clear:

gpg: exporting a secret dual key is not yet supported

A secret key backup in Kleopatra will show this error instead, which is misleading:

Note: This might also be related to https://dev.gnupg.org/T7883

Details

Version
gpg4win-5.0.0-beta395 @ win11

Event Timeline

timegrid created this object with edit policy "Contributor (Project)".
ikloecker moved this task from Backlog to WIP on the gpd5x board.
ikloecker added a subscriber: werner.

@werner Proposed patch for gpg:

diff --git a/g10/export.c b/g10/export.c
index 5dcb9c665..908a6b6a0 100644
--- a/g10/export.c
+++ b/g10/export.c
@@ -1961,7 +1961,9 @@ do_export_one_keyblock (ctrl_t ctrl, kbnode_t keyblock, u32 *keyid,
           if (strchr (hexgrip, ','))
             {
               log_error ("exporting a secret dual key is not yet supported\n");
-              return gpg_error (GPG_ERR_NOT_IMPLEMENTED);
+              err = gpg_error (GPG_ERR_NOT_IMPLEMENTED);
+              write_status_error ("export_keys.secret", err);
+              return err;
             }
 
           xfree (serialno);