The config options RSAKeySizes and PGPKeyType need to be re-implemented.
For more details see the corresponding Ticket for Kf5 T7674: Kleopatra: Restore behavior of RSAKeySizes and PGPKeyType
Description
Description
Revisions and Commits
Revisions and Commits
| rLIBKLEO Libkleo | |||
| rLIBKLEOa6c8962a9e1a Re-add support for legacy settings PGPKeyType and RSAKeySizes | |||
| rLIBKLEO2e1867d75546 Add support for CMS to algorithm helpers | |||
| rKLEOPATRA Kleopatra | |||
| rKLEOPATRAb9fa02ba2216 Use extended helper to get compliant algorithms for CMS | |||
Related Objects
Related Objects
Event Timeline
Comment Actions
The settings should work again. They are described at https://docs.kde.org/trunk_kf6/en/kleopatra/kleopatra/admin.html#admin-certificate-request-wizard-keys , but note that the documentation is severely outdated. Note that those settings are not officially supported by GnuPG (VS-)Desktop (see https://gnupg.com/vsd/kleopatra-settings.html).
For PGPKeyType the only accepted value is "RSA" (case insensitive). If this setting is set to "RSA" then only RSA keys can be generated with Kleopatra.
For RSAKeySizes the only supported values are 2048, 3072, 4096. The default can be indicated by prefixing the value with - (ASCII hyphen/minus sign). If this setting is set then PGPKeyType is implicitly assumed to be "RSA".
If de-vs compliance is enforced then only compliant algorithms are allowed, i.e. rsa2048 won't be allowed even if listed in RSAKeySizes. If only 2048 is set with RSAKeySizes then Kleopatra VSD will ignore this setting and allow all compliant algorithms.
Comment Actions
Looks good to me on gpg4win-5.0.2-beta2 @ win11:
- PGPKeyType=RSA
- RSAKeySizes=2048,-4096
- RSAKeySizes=2048,-4096 + de_vs compliance
- RSAKeySizes=-2048 + de_vs compliance
Note: Ticket for the outdated handbook (in this state I'd rather just remove the link): T7895: Kleopatra: Handbook outdated