Tested with VS-Desktop-3.3.90.12-Beta, GpgOL 6.5 (WIN10 and WIN11)
- Queries
- All Stories
- Search
- Advanced Search
- Transactions
- Transaction Logs
Advanced Search
Sep 23 2025
Test with 3.3.90.12-Beta:
The test mail from before does not cause a spawn cycle and no high CPU load any more. (Tested without "show as text only", as it was not relevant before.)
Looks good to me on vsd-3.3.3-beta90.12 @ win10 (temporary filename is now attachment.odt or e.g. attachment (002).odt)
Debug log for vsd:
Also still present on vsd-3.3.3-beta90.12 @ win10 (mail is not moved)
Sep 22 2025
After a discussion we decided to drop the idea to save the status of the check boxes even for only the box "encrypt for others".
Current logs for a forever hang:
still reproducible on gpg4win-5.0.0-beta369 @ win10
In T6117#205379, @ikloecker wrote:I guess this is a typo because the CSR looks like an encryption-only certificate.
Sep 19 2025
I think this will make the dialog less user friendly because with this change one always needs to check the status of all check boxes. Without the change the check boxes always have the same status when the dialog is opened the same way. Predictability is very important for usability and even more for accessibility.
I would like to change this ticket to "Save status of all check boxes in the sign/encrypt dialog".
ok, changed the text in the description of the ticket accordingly, but put two more "team" back in.
Dialogtext (winzige Politur):
Sep 18 2025
We decided to
Looks like there is a rights problem modifying the body of those mails
Every time when we try to modify the HTMLBODY or BODY property we fail with MAPI_E_NO_ACCESS.
The attached mails in those tests where ms-tnef formated (winmail.dat)
omhelp.cpp:lookup_oom_dispid:160 wchar_t alloc 00000155d9abfe80:HTMLBody
07:35:08/5284/oomhelp.cpp:put_oom_string:674 wchar_t alloc 00000155ccf77710:<html><head></head><body><table border="0" width="100%" cellspacing="1" cellpadding="1" bgcolor="#0069cc"><tr><td bgcolor="#0080ff"><p><span style="font-weight:600; background-color:#0080ff;"><center>OpenPGP Nachricht</center><span></p></td></tr><tr><td bgcolor="#e0f0ff"><center><br/>Bitte warten Sie w�hrend die Nachricht entschl�sselt / gepr�ft wird...</td></tr></table></body></html>
07:35:08/5284/oomhelp.cpp:put_oom_string: Putting 'HTMLBody' failed: 0x80020009
07:35:08/5284/DBG_OOM/oomhelp.cpp:dump_excepinfo: Exception:
wCode: 0x1000
wReserved: 0x0
source: Microsoft Outlook
desc: Sie besitzen nicht die erforderliche Berechtigung, um diesen Vorgang auszuf�hren.
help: null
helpCtx: 0x0
deferredFill: 0000000000000000
scode: 0x80070005
07:35:08/5284/TRACE/oomhelp.cpp:put_oom_string:699: return
07:35:08/5284/ERROR/mail.cpp:decryptVerify_o: Failed to modify html body of item.Sep 17 2025
We got new suggestions for this:
Sep 16 2025
I found and fixed a bug (likely a regression in the new code): When CN_prefill or EMAIL_prefill is configured as true and no fixed CN or EMAIL is configured then Kleopatra should prefill Name and Email with values taken from CONFIGDIR/emaildefaults (used by KDE apps on Linux), from the Windows user or from the EMAIL environment variable. This didn't work anymore.
To query the AD I used the GPGME function gpgme_op_assuan_transact_ext with an query string like this:
ad_query --subst --attr=dn,userAccountControl (&(objectcategory=person)(objectclass=user) (|(userPrincipalName={{email}}) (mail={{email}})))Of course {{email}} must be replaced with the mail address queried, this might probably also be the UserPrincipalName.
Meanwhile we notice this also with OpenPGP Mails. This needs to be further investigated.
Sep 15 2025
We'll keep it as it is, for the improvement see T7814
In T6117#205277, @timegrid wrote:Notes (probably as intended):
- [$i]mmutable does not work for CN or EMAIL
In T6117#205277, @timegrid wrote:
- All fields (signing only, rsa4096)
Certificate Request:
[...]
X509v3 Key Usage: critical Key Encipherment, Data Encipherment
Updated the task description after talking with @ikloecker
In T7758#205218, @timegrid wrote:Note: If i set an invalid path in "Software\\GnuPG:Install Directory"
- the gpgconf -X output does not change
- the self-test Config File 'libkleopatrarc' fails with Error in archive definition tar: 'pack-command-openpgp' empty or not found
In T7758#205217, @timegrid wrote:This probably can only be tested with signed releases?
I don't see how this could happen unless you have canceled an export. In this case Kleopatra saved an empty path as last location and then on the next export Kleopatra proposed Documents. The latest changes prevent Kleopatra from saving an empty path as last location and they ensure that Kleopatra immediately writes [Export]LastDirectory to disk.
Sep 12 2025
Sorry, I just found out, that windows caps the filename earlier than max length, so my former tests were invalid.
All mails touched by gpgol should already have a GPGOL_UID_DASL. So to replicate:
- Send a new encrypted mail (e.g. Edward -> Ted)
- Don't open that mail, but open the context menu: Move -> Other Folder ...
- Select a subfolder of INBOX and click OK -> the mail is not moved
fix tested and confirmed with GnuPG 2.5.12 on windows 10
Sep 11 2025
Looks good to me on gpg4win-5.0.0-beta369 @ win10
Sep 10 2025
Sep 9 2025
Still the same behavior as described in https://dev.gnupg.org/T7240#202915 on gpg4win-5.0.0-beta369 @ win10
Looks good to me on gpg4win-5.0.0-beta369 @ win10:
Note: If i set an invalid path in "Software\\GnuPG:Install Directory"
- the gpgconf -X output does not change
- the self-test Config File 'libkleopatrarc' fails with Error in archive definition tar: 'pack-command-openpgp' empty or not found
This probably can only be tested with signed releases?
Looks good to me on gpg4win-5.0.0-beta369 @ win10:
Notepad window Text to process edit Either enter a text you want to sign or encrypt, or an encrypted or signed text you want to decrypt or verify. You can also enter certificates in text form to import them. blank t e s t Signing and encrypting notepad... Successfully encrypted and signed the notepad
Looks good to me on gpg4win-5.0.0-beta369 @ win10
Looks good to me on gpg4win-5.0.0-beta369 @ win10 (no lines omitted or duplicate readings):
pinentry-qt dialog Enter passphrase Passphrase: edit protected blank [...] does not match - try again dialog OK button Enter
Looks good to me on gpg4win-5.0.0-beta369 @ win10
Sep 8 2025
Tested on gpg4win-5.0.0-beta369 @ win10.
Looks good to me on gpg4win-5.0.0-beta369 @ win10.
Can't reproduce it anymore, message is S/MIME decrypted instantly:








