Page MenuHome GnuPG

Kleopatra: allow saving CSR in PEM format
Testing, HighPublic

Description

We have an urgent customer requirement for saving CSRs in PEM format instead of binary (p10), which is used currently.

Needs no fancy configuration, setting the output format via a registry key would be enough.

Event Timeline

ebo triaged this task as High priority.Fri, Feb 20, 2:13 PM
ebo created this task.
ebo created this object with edit policy "Contributor (Project)".

What about always using PEM for all generated CSRs? As far as I can see, gpgsm command line always uses PEM when generating CSRs.

ikloecker mentioned this in Unknown Object (Maniphest Task).Mon, Feb 23, 9:58 AM
ikloecker changed the task status from Open to Testing.Mon, Feb 23, 6:19 PM
ikloecker moved this task from Backlog to WiP on the vsd33 board.

Ready for testing in VSD 3.3

ikloecker added a project: vsd34.

Now also available in Gpg4win 5.

Also backported for VSD 3.4.

The corresponding config option (which defaults to false) is

[CMS]
SaveCSRAsPEM=true

Works with VS-Desktop-4.0.90.1203-Beta when putting this in C:\Program Files\GnuPG VS-Desktop\share\kleopatrarc
CSR is then saved as .pem file with ascii-armored content.

What does not work is putting it in C:\Users\USERNAME\AppData\Roaming\Gpg4win\kleopatrarc
Is this intended?

And I also did not manage to configure this via the Windows Registry. Setting Computer\HKEY_LOCAL_MACHINE\SOFTWARE\GNU\Kleopatra\CMS\SaveCSRAsPEM=true does not work. Setting it to "1" dito.

config file: Sorry, I got confused, it has to be %APPDATA%\GnuPG VS-Desktop\kleopatrarc in this case (VS-Desktop-4.0.90.1203-Beta), of course. And this one works.
Registry entry SOFTWARE\GnuPG VS-Desktop\Kleopatra\CMS\SaveCSRAsPEM does not work, though. But this is a separate issue, seems all Registry entries do not work in that build.

For Gpg4win 5.0.2 (Beta) %APPDATA%/Gpg4win/kleopatrarc works and the Registry setting Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Gpg4win\Kleopatra\CMS\kleopatrarc=true as well.

So everything ok regarding this ticket.

ikloecker mentioned this in Unknown Object (Maniphest Task).Mon, Mar 2, 9:07 AM
ebo edited projects, added gpd5x (gpd-5.0.2); removed gpd5x.
ebo edited projects, added vsd33 (vsd-3.3.6); removed vsd33.