A side question: what are your language settings there?
Seems gpg gives it's error messages in German, Kleo in English

This can only be tested with the AppImage because on Windows we disable drag&drop of certificates.

• I might want to know the fingerprints of those unknown recipients to search for them (in the audit log I can't see, which of those fingerprints are unknown immediately)

Note that currently Kleopatra (gpg4win 5 beta) fails to delete the key, which might impact other operations. I'm currently trying to figure out, if some other bugs/quirks are a subsequent error or not.

Workaround is to use --with-keygrip and delete both <keygrip>.key files. Problem here is that one part may be on a smartcard or one part might be shared (although not allowed) with other keys.

there have been changes affecting this:

Didn't happen on Linux (on my one and only attempt to reproduce). Will have to check on Windows.

Looks like we need a different implementation using Microsoft's groups-of-8 formatting. I'm not sure if for libkleo we should add a format enum to the existing prettyId() function so that we don't have to come up with multiple function names.

Looks good to me on gpg4win-5.0.0-beta395 @ win11

Not sure, if my test covers all cases (especially regarding cache): encrypted for alice with several ADSKs (local/card, v4/v5, several algos, 1 unknown = not in keyring).

• If the cert associated with the adsk is in keyring, the userid of this cert is shown.
• The number of unknown recipients (cert not in keyring) is shown at the end.

Makes sense to me. Possible optimizations:

• I might want to know the fingerprints of those unknown recipients to search for them (in the audit log I can't see, which of those fingerprints are unknown immediately)
• The cert used for decryption could be listed first

The option is still displayed on gpg4win-5.0.0-beta395 @ win11, probably the fix is not included yet.

Looks good to me on gpg4win-5.0.0-beta395 @ win11

Looks good to me on gpg4win-5.0.0-beta395 @ win11

Looks good to me on gpg4win-5.0.0-beta395 @ win11

Looks mostly good to me on gpg4win-5.0.0-beta395 @ win11.

nvda speech viewer output:

Related Addresses  tab control
Related Addresses  tab  Alt+  R
Related addresses  list
edward.tester@demo.gnupg.com  not selected

speech viewer:

Search missing keys when verifying a signature  check box  not checked  Alt+  S
X.509 Directory Services  grouping
Directory services  list  This is a list of all directory services that are configured for use with X.509.

Right, it's the same with gpgol disabled. I set it to invalid.

But you are able to do this w/o gpgol being active?

Sounds good to me on gpg4win-5.0.0-beta395 @ win11

Looks good to me on gpg4win-5.0.0-beta395 @ win11

Looks good to me on gpg4win-5.0.0-beta395 @ win11

That's not surprising. The fix was made after GpgOL 2.6.7. And gpg4win-5.0.0-beta395 still seems to include GpgOL 2.6.6 only.

Tested on gpg4win-5.0.0-beta395 @ win10/win11

Mostly looks good to me on gpg4win-5.0.0-beta395 @ win11.

Looks good to me on gpg4win-5.0.0-beta395 @ win11

Issue is still present in gpg4win-5.0.0-beta395 @ win11:

gpgol logs:

Maybe related to https://dev.gnupg.org/T7813

Looks good to me on gpg4win-5.0.0-beta395 @ win11

Then I don't see how we can avoid this. It should be easy to reproduce this with gpgconf alone if you know how to use --change-options manually. Simply set the LDAP server that's already configured in the global config file.

This was a regression introduced by my fix to make F5 work again and to ensure that it's displayed in the View menu (which itself was a regression of the menu changes made with T7579: Kleopatra: improve menu items).

Looks good to me on gpg4win-5.0.0-beta395 @ win11 (gpg 2.5.13).

gpgconf does not know about the global config files. Nor does it known about things like gpg.conf-2 etc.