Maniphest T8294

Okular: "Untrusted" or "not certified" certificates are shown as trusted
Open, Needs TriagePublic
Actions

Assigned To
None
Authored By
• ebo
Fri, Jun 12, 3:35 PM
Tags
Subscribers
• ebo
svuorela

Description

It seems S/MIME Certificates whose Root -CA was set explicitly to "untrusted" are shown as "trusted" in Okular.
Not certified OpenPGP certificates are shown as "trusted", too.
The screenshot shows an S/MIME certificate where the root CA has no trust:

Obviously, the text has to be "not trusted". Same for OpenPGP certificates which are not certified by oneself or another trusted key.

I believe we should also highlight this, as this is very important information and it is hidden in a dropdown view.

Details

Version
4win 5.0.2

Event Timeline

• ebo created this task.Fri, Jun 12, 3:35 PM
• ebo added a comment.Fri, Jun 12, 4:10 PM

To make matters more confusing: For the same test PDFs I get "The signature could not be verified" and "certificate has not yet been verified" on Linux with the vsd 3.3.7 Appimage…

• ebo mentioned this in Unknown Object (Maniphest Task).Mon, Jun 15, 10:24 AM
• ebo renamed this task from Okular: All certificates are shown as trusted to Okular: "Untrusted" or "not certified" certificates are shown as trusted.Mon, Jun 15, 11:28 AM
• ebo updated the task description. (Show Details)