Page MenuHome GnuPG

Support config options RSAKeySizes and PGPKeyType for Kf6
Testing, NormalPublic

Description

The config options RSAKeySizes and PGPKeyType need to be re-implemented.

For more details see the corresponding Ticket for Kf5 T7674: Kleopatra: Restore behavior of RSAKeySizes and PGPKeyType

Event Timeline

ebo triaged this task as Normal priority.Mon, Jan 26, 2:28 PM
ebo created this task.
ebo created this object with edit policy "Contributor (Project)".
ikloecker moved this task from Backlog to WIP on the gpd5x board.
ikloecker changed the task status from Open to Testing.Wed, Feb 11, 10:51 AM

The settings should work again. They are described at https://docs.kde.org/trunk_kf6/en/kleopatra/kleopatra/admin.html#admin-certificate-request-wizard-keys , but note that the documentation is severely outdated. Note that those settings are not officially supported by GnuPG (VS-)Desktop (see https://gnupg.com/vsd/kleopatra-settings.html).

For PGPKeyType the only accepted value is "RSA" (case insensitive). If this setting is set to "RSA" then only RSA keys can be generated with Kleopatra.

For RSAKeySizes the only supported values are 2048, 3072, 4096. The default can be indicated by prefixing the value with - (ASCII hyphen/minus sign). If this setting is set then PGPKeyType is implicitly assumed to be "RSA".

If de-vs compliance is enforced then only compliant algorithms are allowed, i.e. rsa2048 won't be allowed even if listed in RSAKeySizes. If only 2048 is set with RSAKeySizes then Kleopatra VSD will ignore this setting and allow all compliant algorithms.

ikloecker mentioned this in Unknown Object (Maniphest Task).Mon, Feb 23, 9:00 AM