Well, it Just Works(tm). You should make sure that a /run/user/NNNN direcory exists so GnuPG is able to create its subdir for the socket files.

I'm going to add selftest of EdDSA with test vectors from RFC 8032.

With the fix of T6523, make check goes all well (on Wine emulation and on Windows, for i686 and for x86_64).

Fixed in master.

I modified ffi.c, to have renamed process-spawn-io function doing I/O by C.

works:

Sorry to bump a discussion a few months after it has already died down, but with the deprecation and removal of init-based supervised launching of gpg-agent, what's the recommended approach now to auto-start it?

Calling assuan_release before kbx_client_data_release is the best (and we join the thread).

works

The current date should be avoided even if explicitly chosen, on the command line the earliest allowed date is tomorrow.

To align the default expiration time with the BSI approval and other related software we change this now to 3 years.

Would work better if every attention craving window would refer to the file resp certificate it addresses but that is covered by T6152

Works in kleopatra; tested with gpg4win-4.2.0-beta339.

Gpg4win doesn't include libexpat anymore (since it doesn't include gpa and pinentry-gtk anymore).

Gpg4win doesn't include libexpat anymore (since it doesn't include gpa and pinentry-gtk anymore).

I had a brief look at this. I don't think there's a way currently to convey "CRL Error" via a keylist result to gpgme. The --with-colons format would probably need to be extended.

I just thought, that we should still show "not certified" if the primary user ID is not certified because Kleopatra always displays the primary user ID (except in the Certificate Details).

tests/openpgp/import.scm hangs with 4096*4.

https://invent.kde.org/pim/messagelib/-/commit/f8373bc09b228cc88577ec88b285c58a06122575

Test with Wine (i686) emulation, I encountered another hang at: Checking armored_key_8192

It looks like having the datastream_thread may be not worth.
One possibility is to implement synchronous read from pipe in kbx_client_data_wait, instead of datastream_thread.