Kleopatra: allow saving CSR in PEM format
Testing, HighPublic

Assigned To
Authored By
ebo
Feb 20 2026, 2:13 PM

Description

We have an urgent customer requirement for saving CSRs in PEM format instead of binary (p10), which is used currently.

Needs no fancy configuration, setting the output format via a registry key would be enough.

Event Timeline

ebo triaged this task as High priority.Feb 20 2026, 2:13 PM
ebo created this task.
ebo created this object with edit policy "Contributor (Project)".

What about always using PEM for all generated CSRs? As far as I can see, gpgsm command line always uses PEM when generating CSRs.

ikloecker mentioned this in Unknown Object (Maniphest Task).Feb 23 2026, 9:58 AM
ikloecker changed the task status from Open to Testing.Feb 23 2026, 6:19 PM
ikloecker moved this task from Backlog to WiP on the vsd33 board.

Ready for testing in VSD 3.3

ikloecker added a project: vsd34.

Now also available in Gpg4win 5.

Also backported for VSD 3.4.

The corresponding config option (which defaults to false) is

[CMS]
SaveCSRAsPEM=true

Works with VS-Desktop-4.0.90.1203-Beta when putting this in C:\Program Files\GnuPG VS-Desktop\share\kleopatrarc
CSR is then saved as .pem file with ascii-armored content.

What does not work is putting it in C:\Users\USERNAME\AppData\Roaming\Gpg4win\kleopatrarc
Is this intended?

And I also did not manage to configure this via the Windows Registry. Setting Computer\HKEY_LOCAL_MACHINE\SOFTWARE\GNU\Kleopatra\CMS\SaveCSRAsPEM=true does not work. Setting it to "1" dito.

config file: Sorry, I got confused, it has to be %APPDATA%\GnuPG VS-Desktop\kleopatrarc in this case (VS-Desktop-4.0.90.1203-Beta), of course. And this one works.
Registry entry SOFTWARE\GnuPG VS-Desktop\Kleopatra\CMS\SaveCSRAsPEM does not work, though. But this is a separate issue, seems all Registry entries do not work in that build.

For Gpg4win 5.0.2 (Beta) %APPDATA%/Gpg4win/kleopatrarc works and the Registry setting Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Gpg4win\Kleopatra\CMS\kleopatrarc=true as well.

So everything ok regarding this ticket.

ikloecker mentioned this in Unknown Object (Maniphest Task).Mar 2 2026, 9:07 AM
ebo edited projects, added gpd5x (gpd-5.0.2); removed gpd5x.
ebo edited projects, added vsd33 (vsd-3.3.6); removed vsd33.