Page MenuHome GnuPG

Okular: Wrong fingerprint is shown for OpenPGP certificates
Closed, ResolvedPublic

Description

This was reported by radz for a (not-hardened) Okular 26.04 version but it's of course the same for our own builds.

In a PDF signed with an OpenPGP certificate go to the signature tab, right-click -> Properties, then "View Certificate". The fingerprints shown there are not the correct fingerprints of the certificate, instead they are the sha-sums of the file you can export with the button below:

Details

Version
4win 5.0.2

Event Timeline

ebo created this object with edit policy "Contributor (Project)".
ebo mentioned this in Unknown Object (Maniphest Task).Jun 15 2026, 10:24 AM
svuorela mentioned this in Unknown Object (Maniphest Task).Jun 22 2026, 6:12 AM
ebo triaged this task as Normal priority.Jun 24 2026, 10:54 AM
ebo changed the task status from Open to Testing.Jun 24 2026, 4:05 PM

was merged in okular on 2026-06-21

timegrid claimed this task.
timegrid added a subscriber: timegrid.

Looks good to me on gpg4win-5.1.0-beta653 @ win11:

timegrid edited projects, added gpd5x (gpd-5.1.0); removed gpd5x.