It would be possible as a workaround in Kleopatra to show any identical entries only once. Saving after that will not add any more entries.

Okay, forward porting that patch is the easiest solution. Actually this is not enough: Users of Libgcrypt also need to make sure that the new sysconfig dir has the right permissions. That's a part for the installer and concrete ACLs may differ.

Likely a bug in Qt. Accessibility Insights for Windows shows that the parent of all grid items is the tree view. It should probably be the parent item instead so that ATs can go up and count the level.

Good catch. My guess is that get_uid_for_sender returns the last matching UID without checking for revocations. The matching was done on the mailbox part only. For reference:

In T6568#208992, @timegrid wrote:

Still open in this ticket (see https://dev.gnupg.org/T6568#208755 ):

• Collapsible items in tree views can't be expanded/collapsed, at least not with space or arrow left/right

Still open in this ticket (see https://dev.gnupg.org/T6568#208755 ):

• Collapsible items in tree views can't be expanded/collapsed, at least not with space or arrow left/right
• Tab navigation in the Smartcard Dialog is broken

New tickets split from this:

• https://dev.gnupg.org/T7952 Make table column headings for other tables accessible
• https://dev.gnupg.org/T7953 Make table header column width accessible
• https://dev.gnupg.org/T7954 Highlight focused cell in tables

In gpg4win-5.0.0-beta413 @ win11 there's a failing patch for kcrash:

Here is my analysis.

I can't reproduce this on gpg4win-5.0.0-beta413 @ win11.

This seems to apply only for non vsd compliant algos. Importing and certifying a

• rsa/brainpool cert results in security level 4
• cv25519 cert results in security level 2

For our Okular, we should not use the standard file names (okularrc, …) as this would conflict with a regular Okular installation.

I rechecked: the revoked userid has to match the email address of the sender. Still there's another non revoked userid with the same email address:

Yubikeys allow that. See my mail to the mailing list.

Do you mean one of the user-ids has been revoked or the one matching the mail sender?

The extension .part is used by Mozilla/Firefox. Curl uses .tmp. Is that OK for Windows machine to use .part?

I examined the code of gnupg_sysconfdir in gnupg/common/homedir.c, if we could factor out things to gpgrt, so that something like gpgrt_fconcat with GPGRT_SYSCONFDIR can be implemented.

Seems like the OpenPGP Card Specification does not allow the change of retry counters.

That is a feature not a bug. Make also sense if your threat model is store-trafic-no-decrypt-later. If you can get the key you will also be abale to get the cleartext. Any nobody can remember a passphrase on par with the claimed Kyber security level.

yes, it seems to be caused by one of the patches. I'm trying to figure out which one...

Or Window activity (which is related to focus). I'm wondering if one of my patches is to blame.

I can reproduce. It's not that the Button itself needs to be pressed twice, *something* in the dialog needs to be pressed before the button reacts. So this looks like it's something about focus

I wonder if we should better open a new ticket with all the relevant data when we get a report giving more information and set this one to invalid.

And meanwhile I have tested this a bit with VSD3.3.3 and in the case that the sender has a valid and *VS-compliant* key the automatic switching works.

I think Gpg4win will keep the language switch because for Gpg4win we don't disable any actions via action restrictions (as far as I know).

In T6568#208875, @timegrid wrote:

• Column sort order and visibility can be configured only via view and nowhere else. That's how it should be, right?

What do you mean?

The description says: The selection of visible columns and sorting should be possible **additionally** via the main menu.
I just wanted to make sure, "additionally" means additionally to the normal (non a11n accessible) context menu and not some other (a11n accessible) place i haven't found.

The preference option does already exist, it is "Prefer S/MIME". If not set (the default), then OpenPGP keys are preferred.

I'd prefer the language switch for testing, but I mostly had tests for translation issues in mind, e.g. wrong translation language, tooltip size in some language - which probably should be covered by setting the language via the envvar. I'll do some tests to see, if this would work.

• Column sort order and visibility can be configured only via view and nowhere else. That's how it should be, right?

What do you mean?

Yes, very likely it was with NVDA's (update) installer. Therefore I looked at NVDA's source code to find out how to make it work for Kleopatra just to find out that NVDA fakes it itself. I would close this ticket as won't fix.

In T7949#208870, @timegrid wrote:

Regarding the tests: Being able to set the language for Kleopatra via some environment variable would be fine, too.

Ah, I see. I heard the continuous beeps with another pitch once (probably in the installer then) and thought this was possible. Shall I set this to won't fix then?

In T6568#208750, @timegrid wrote:

Questions:

• Column sort order and visibility can be configured only via view and nowhere else. That's how it should be, right?

Regarding the tests: Being able to set the language for Kleopatra via some environment variable would be fine, too.

Separate ticket for the "initial language selection": https://dev.gnupg.org/T7949

The 50 % is when either WKD lookup or keyserver lookup are done and the other is still running. None of those two lookups can be partially done. Hence there's no way to do something with more steps (safe for faking it with a timer). The only alternative is an unspecified progress bar, but unspecified progress bars (aka busy indicators) are completely silent as you can see in the "Loading certificate cache..." busy indicator. (NVDA's code doesn't support unspecified progress except in their own installer which has special code for this, i.e. the installer makes the sound itself.)

This isn't a Kleopatra issue. I suppose this happens with Outlook. The security confirmation checks for the type of keys it's asked for. Either OpenPGP or S/MIME or unspecified.

This isn't reproducible on Linux. (Tested with a Yubikey but that should really make no difference.) Maybe a regression of our Qt patches.