In T6117#205379, @ikloecker wrote:I guess this is a typo because the CSR looks like an encryption-only certificate.
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Feed Advanced Search
Advanced Search
Advanced Search
Sep 22 2025
Sep 22 2025
timegrid added a comment to T6117: Kleopatra: Make creation of S/MIME certificate signing request accessible.
Sep 19 2025
Sep 19 2025
I think this will make the dialog less user friendly because with this change one always needs to check the status of all check boxes. Without the change the check boxes always have the same status when the dialog is opened the same way. Predictability is very important for usability and even more for accessibility.
I would like to change this ticket to "Save status of all check boxes in the sign/encrypt dialog".
ok, changed the text in the description of the ticket accordingly, but put two more "team" back in.
Dialogtext (winzige Politur):
Sep 18 2025
Sep 18 2025
• ikloecker triaged T7816: Kleopatra: Title of Certify dialog is incomplete for email-only user ID as Normal priority.
We decided to
mmontkowski added a comment to T7806: GpgOL: Attached mails are empty if attached mail has encrypted attachments or is in text format and encrypted or signed.
Looks like there is a rights problem modifying the body of those mails
Every time when we try to modify the HTMLBODY or BODY property we fail with MAPI_E_NO_ACCESS.
The attached mails in those tests where ms-tnef formated (winmail.dat)
omhelp.cpp:lookup_oom_dispid:160 wchar_t alloc 00000155d9abfe80:HTMLBody
07:35:08/5284/oomhelp.cpp:put_oom_string:674 wchar_t alloc 00000155ccf77710:<html><head></head><body><table border="0" width="100%" cellspacing="1" cellpadding="1" bgcolor="#0069cc"><tr><td bgcolor="#0080ff"><p><span style="font-weight:600; background-color:#0080ff;"><center>OpenPGP Nachricht</center><span></p></td></tr><tr><td bgcolor="#e0f0ff"><center><br/>Bitte warten Sie w�hrend die Nachricht entschl�sselt / gepr�ft wird...</td></tr></table></body></html>
07:35:08/5284/oomhelp.cpp:put_oom_string: Putting 'HTMLBody' failed: 0x80020009
07:35:08/5284/DBG_OOM/oomhelp.cpp:dump_excepinfo: Exception:
wCode: 0x1000
wReserved: 0x0
source: Microsoft Outlook
desc: Sie besitzen nicht die erforderliche Berechtigung, um diesen Vorgang auszuf�hren.
help: null
helpCtx: 0x0
deferredFill: 0000000000000000
scode: 0x80070005
07:35:08/5284/TRACE/oomhelp.cpp:put_oom_string:699: return
07:35:08/5284/ERROR/mail.cpp:decryptVerify_o: Failed to modify html body of item.Sep 17 2025
Sep 17 2025
We got new suggestions for this:
Sep 16 2025
Sep 16 2025
• ikloecker set External Link to https://github.com/nvaccess/nvda/issues/18935 on T7776: Kleopatra: NVDA reads parent window of error messages.
• ikloecker updated the task description for T6094: Kleopatra: Make prefilled name and email address for new certificates configurable.
• ikloecker added a comment to T6117: Kleopatra: Make creation of S/MIME certificate signing request accessible.
I found and fixed a bug (likely a regression in the new code): When CN_prefill or EMAIL_prefill is configured as true and no fixed CN or EMAIL is configured then Kleopatra should prefill Name and Email with values taken from CONFIGDIR/emaildefaults (used by KDE apps on Linux), from the Windows user or from the EMAIL environment variable. This didn't work anymore.
• TobiasFella changed the status of T7240: GpgOL: Config dialog not registering as closed from Open to Testing.
• alexk added a comment to T6094: Kleopatra: Make prefilled name and email address for new certificates configurable.
To query the AD I used the GPGME function gpgme_op_assuan_transact_ext with an query string like this:
ad_query --subst --attr=dn,userAccountControl (&(objectcategory=person)(objectclass=user) (|(userPrincipalName={{email}}) (mail={{email}})))Of course {{email}} must be replaced with the mail address queried, this might probably also be the UserPrincipalName.
• ikloecker updated the task description for T6094: Kleopatra: Make prefilled name and email address for new certificates configurable.
• ikloecker updated the task description for T6094: Kleopatra: Make prefilled name and email address for new certificates configurable.
• ebo renamed T6094: Kleopatra: Make prefilled name and email address for new certificates configurable from Kleopatra: Take windows user email Address from Active Directory if available to Draft: Kleopatra: Make prefilled name and email address for new certificates configurable.
• ebo placed T4785: GpgOL: "You have changed a copy of this Element" message in Outlook for S/MIME mails up for grabs.
Meanwhile we notice this also with OpenPGP Mails. This needs to be further investigated.
Sep 15 2025
Sep 15 2025
We'll keep it as it is, for the improvement see T7814
• ikloecker added a comment to T6117: Kleopatra: Make creation of S/MIME certificate signing request accessible.
In T6117#205277, @timegrid wrote:Notes (probably as intended):
- [$i]mmutable does not work for CN or EMAIL
• ikloecker added a comment to T6117: Kleopatra: Make creation of S/MIME certificate signing request accessible.
In T6117#205277, @timegrid wrote:
- All fields (signing only, rsa4096)
Certificate Request:
[...]
X509v3 Key Usage: critical Key Encipherment, Data Encipherment
• ebo updated subscribers of T7809: Kleopatra: Save of audit log viewer is html without an .html extension.
Updated the task description after talking with @ikloecker
• ebo renamed T7809: Kleopatra: Save of audit log viewer is html without an .html extension from Kleopatra: Save of audit log viewer is html to Kleopatra: Save of audit log viewer is html without an .html extension.
• ikloecker added a comment to T7758: Kleopatra: Make the registry path for the GnuPG install directory customizable.
In T7758#205218, @timegrid wrote:Note: If i set an invalid path in "Software\\GnuPG:Install Directory"
- the gpgconf -X output does not change
- the self-test Config File 'libkleopatrarc' fails with Error in archive definition tar: 'pack-command-openpgp' empty or not found
• ikloecker added a comment to T7758: Kleopatra: Make the registry path for the GnuPG install directory customizable.
In T7758#205217, @timegrid wrote:This probably can only be tested with signed releases?
• ikloecker added a comment to T7802: Kleopatra: Remember last used file system locations when saving or opening files.
I don't see how this could happen unless you have canceled an export. In this case Kleopatra saved an empty path as last location and then on the next export Kleopatra proposed Documents. The latest changes prevent Kleopatra from saving an empty path as last location and they ensure that Kleopatra immediately writes [Export]LastDirectory to disk.
Sep 12 2025
Sep 12 2025
timegrid moved T7722: GpgOL: Temp filename creation fails to choose proper extension from QA to Done on the gpd5x board.
Sorry, I just found out, that windows caps the filename earlier than max length, so my former tests were invalid.
timegrid renamed T7712: Moving new encrypted emails to folder via context menu fails from Moving encrypted emails to folder fails to Moving new encrypted emails to folder via context menu fails.
timegrid changed the status of T7712: Moving new encrypted emails to folder via context menu fails from Testing to Open.
All mails touched by gpgol should already have a GPGOL_UID_DASL. So to replicate:
- Send a new encrypted mail (e.g. Edward -> Ted)
- Don't open that mail, but open the context menu: Move -> Other Folder ...
- Select a subfolder of INBOX and click OK -> the mail is not moved
m.eik moved T7799: gpg-agent crashes when using putty for ssh connection from WIP to Done on the gpd5x board.
fix tested and confirmed with GnuPG 2.5.12 on windows 10
Sep 11 2025
Sep 11 2025
• ebo moved T7269: Attachments vanish from forward encrypted message from Backlog to QA on the gpd5x board.
• ebo moved T7269: Attachments vanish from forward encrypted message from Backlog to QA on the vsd33 board.
• ebo edited projects for T7269: Attachments vanish from forward encrypted message, added: gpd5x; removed Restricted Project.
timegrid moved T6117: Kleopatra: Make creation of S/MIME certificate signing request accessible from QA to Done on the gpd5x board.
Looks good to me on gpg4win-5.0.0-beta369 @ win10
Sep 10 2025
Sep 10 2025
Sep 9 2025
Sep 9 2025
timegrid changed the status of T7602: Kleopatra: "Add ADSK" tooltip is long and doesn't wrap from Open to Testing.
timegrid moved T7760: Kleopatra: Move all buttons from above to below the textfield from QA to Done on the gpd5x board.
• ebo updated the task description for T7760: Kleopatra: Move all buttons from above to below the textfield.
timegrid moved T7722: GpgOL: Temp filename creation fails to choose proper extension from WIP to QA on the gpd5x board.
timegrid moved T7758: Kleopatra: Make the registry path for the GnuPG install directory customizable from WIP to QA on the gpd5x board.
timegrid moved T7760: Kleopatra: Move all buttons from above to below the textfield from WIP to QA on the gpd5x board.
timegrid moved T6117: Kleopatra: Make creation of S/MIME certificate signing request accessible from WIP to QA on the gpd5x board.
timegrid moved T7556: Kleopatra: Sign/encrypt window improvement (KF6) from WIP to QA on the gpd5x board.
timegrid moved T7730: gpg: retrieve a certificate from an LDAP server before sending it to the LDAP server from WIP to QA on the gpd5x board.
timegrid changed the status of T7240: GpgOL: Config dialog not registering as closed from Testing to Open.
Still the same behavior as described in https://dev.gnupg.org/T7240#202915 on gpg4win-5.0.0-beta369 @ win10
timegrid triaged T7809: Kleopatra: Save of audit log viewer is html without an .html extension as Low priority.
timegrid moved T7741: Kleopatra: Crash when opening audit log from certificate import result dialog from WIP to Done on the gpd5x board.
timegrid moved T7751: Kleopatra: Text field of notepad has no label/accessible name from WIP to Done on the gpd5x board.
Looks good to me on gpg4win-5.0.0-beta369 @ win10:
timegrid added a comment to T7758: Kleopatra: Make the registry path for the GnuPG install directory customizable.
Note: If i set an invalid path in "Software\\GnuPG:Install Directory"
- the gpgconf -X output does not change
- the self-test Config File 'libkleopatrarc' fails with Error in archive definition tar: 'pack-command-openpgp' empty or not found
timegrid added a comment to T7758: Kleopatra: Make the registry path for the GnuPG install directory customizable.
This probably can only be tested with signed releases?
timegrid moved T7770: Kleopatra: Ensure that result of notepad operation is accessible from WIP to Done on the gpd5x board.
Looks good to me on gpg4win-5.0.0-beta369 @ win10:
Notepad window Text to process edit Either enter a text you want to sign or encrypt, or an encrypted or signed text you want to decrypt or verify. You can also enter certificates in text form to import them. blank t e s t Signing and encrypting notepad... Successfully encrypted and signed the notepad
Looks good to me on gpg4win-5.0.0-beta369 @ win10
timegrid moved T7739: pinentry/kleopatra: NVDA reads text multiple times from WIP to Done on the gpd5x board.
Looks good to me on gpg4win-5.0.0-beta369 @ win10 (no lines omitted or duplicate readings):
pinentry-qt dialog Enter passphrase Passphrase: edit protected blank [...] does not match - try again dialog OK button Enter
timegrid moved T7757: Kleopatra: Error "no data" on decryption of tar.gpg archive from WIP to Done on the gpd5x board.
Looks good to me on gpg4win-5.0.0-beta369 @ win10
Sep 8 2025
Sep 8 2025
timegrid moved T7780: Kleopatra: upper case file extensions should be treated the same as lower case when decrypting from WIP to Done on the gpd5x board.
timegrid changed the status of T7802: Kleopatra: Remember last used file system locations when saving or opening files from Testing to Open.
Tested on gpg4win-5.0.0-beta369 @ win10.
timegrid moved T7759: Kleopatra: Notepad encryption with S/MIME fails from QA to Done on the gpd5x board.
Looks good to me on gpg4win-5.0.0-beta369 @ win10.
Can't reproduce it anymore, message is S/MIME decrypted instantly:
timegrid changed the status of T7655: Kleopatra: show a progress window when updating a certificate from Open to Testing.
Looks good to me on gpg4win-5.0.0-beta369 @ win10: The dialog with the progress bar is showing up instantly now.
timegrid moved T7515: Kleopatra: reduce the number of actions in the context menu from WIP to Done on the gpd5x board.
Sep 5 2025
Sep 5 2025
• werner moved T7759: Kleopatra: Notepad encryption with S/MIME fails from Backlog to QA on the gpd5x board.
• werner changed the status of T7759: Kleopatra: Notepad encryption with S/MIME fails from Open to Testing.
Uses gpgme-2.0.0 with the above mentioned patches. I have seen no problems in my quick tests.
Sep 4 2025
Sep 4 2025
timegrid moved T7610: Kleopatra: Update custom colored UI elements when colors change from QA to Done on the gpd5x board.
Key Approval dialog used by GpgOL (VSD only) looks good to me on gpg4win-5.0.0-beta357, Outlook LTSC Standard 2024 @ win10 (compliance mode):
How to test this? The follwing happens for an attachment of an encrypted mail on gpg4win-5.0.0-beta357, Outlook LTSC Standard 2024 @ win10:
Moving an encrypted message on Gpg4win-5.0.0-beta357, Outlook LTSC Standard 2024 @ win10 into an inbox subfolder of Ted.Tester and back works for me, too. Does this confirm, that it's working now?
i've included logfiles for gpg-agent and scdaemon with debug-level 10. the files include
Sep 3 2025
Sep 3 2025
• ebo moved T7799: gpg-agent crashes when using putty for ssh connection from Backlog to WIP on the gpd5x board.
Sep 2 2025
Sep 2 2025
• ikloecker changed the status of T7802: Kleopatra: Remember last used file system locations when saving or opening files from Open to Testing.
• ikloecker changed the status of T6117: Kleopatra: Make creation of S/MIME certificate signing request accessible from Open to Testing.
• ikloecker added a comment to T6117: Kleopatra: Make creation of S/MIME certificate signing request accessible.
Notes for testing (and maybe documentation update):
- A few features (?) of the old CSR creation have been removed:
- The different choices offered after CSR creation (e.g. save to file, send to CA, create signing/encryption CSR with same settings, etc.) have been removed; now a file save dialog pops up when the CSR has been generated
- Custom labels for the RSA key sizes ([CertificateCreationWizard]RSAKeySizeLabels); we use GnuPG's algorithm IDs as labels (items in the drop down box)
- Custom key type ([CertificateCreationWizard]CMSKeyType); CSR creation supported (and still supports) only RSA as "key type"; by marking the config key as immutable one could force the creation of signing+encryption CSRs which makes little sense for S/MIME and might have been "copied" from OpenPGP key creation where forcing the generation of keys for signing & encryption does make some sense.
- Specification of the CA's email address ([CertificateCreationWizard]CAEmailAddress); the generated CSRs are now always written to disk; the users will have to create an email themselves
• ikloecker moved T7802: Kleopatra: Remember last used file system locations when saving or opening files from Backlog to WIP on the gpd5x board.
• ikloecker triaged T7802: Kleopatra: Remember last used file system locations when saving or opening files as Normal priority.
• werner moved T7730: gpg: retrieve a certificate from an LDAP server before sending it to the LDAP server from WIP to QA on the gnupg26 board.
• werner moved T7757: Kleopatra: Error "no data" on decryption of tar.gpg archive from Done to QA on the gnupg26 board.
• werner changed the status of T7799: gpg-agent crashes when using putty for ssh connection from Open to Testing.
We will do a new gpg4win beta soon.
@m.eik Could you please enable debug option for gpg-agent and get the log output for the crash?
Sep 1 2025
Sep 1 2025
I fixed the problem (which I identified above) in gniibe/t7759 branch. There might be other causes/problems for the particular symptom, so, I don't know the fix resolves the symptom or not, though. Anyhow, I believe that this is an improvement.
Aug 29 2025
Aug 29 2025
• ebo edited projects for T7098: Change the GpgOL encryption icon according to its state, added: vsd34; removed vsd33.
Aug 28 2025
Aug 28 2025
Aug 27 2025
Aug 27 2025
• ebo updated the task description for T7786: Draft: Kleopatra: improvements of signature verification result messages.
• ebo triaged T7797: Kleopatra: Draft: Redesign "Directory Services" configuration tab as Wishlist priority.









