With this certificate I do get the security confirmation dialog without "always show" on, but still no new message box.

Yes, the wording for this line should be improved, I agree.
In the current release and the releases up to now this action did not work at all when it was not used in combination with encrypt. That usually happens only if an administrator activates the "always_sign" option, prefers S/MIME and then does not issue users with S/MIME certificates. For OpenPGP we have the "Generate" option preselected in that case.

Without "always show" I get a pinentry immediately after hitting "Send". So no warning.

In T6683#176424, @ebo wrote:

I realized that I still had "always show confirmation dialog" on... When I turn that off I get the default error message, but with encoding errors:

I do not see the default error message, not even with a new, totally empty keyring.
I immediately get:

For sent mails folder there is no solution. The problem is that if the mail never leaves the exchange server it is not converted to a standard compliant PGP/MIME but left in Microsofts internal MAPI format where it looks like this. I think thunderbird has support to fixup a message if the mimetype of the first attachment application/pgp-encrypted. Which reminds me that we need to change the filename of our internal attachment, too to use .mim as an extension. Then you will at least also be able to open such messages on other clients with Kleopatra directly to view the contents of the mail. And a side effect of this might be that Enigmail might then be able to open the mails. If not we would need to talk to enigmail how to solve this.

Uploading two patches for review:

MRs:
https://invent.kde.org/pim/messagelib/-/merge_requests/143
https://invent.kde.org/pim/akonadi-calendar/-/merge_requests/74

After some investigation it turns out there are several bugs in the thing that eventually produces an email with the counter proposal.

Do you have any hint how I can test this? I installed Chinese-Simplified (zh_CN) but I fear switching the display Language. Maybe I should just use _wasctime and convert to utf8

I had a look at the current state (VS-Desktop-3.2.0.0-beta229/231 from 2023-09-29):

So I have analyzed the problem and I think I understand it now, but I don't really have a solution yet as I think a new option or change in gpgtar might be needed. I think the easiest would be that if --utf8-strings is provided that also the --output parameter is assumed to be UTF8 encoded? And not just the files from --files-from?

See also https://dev.gnupg.org/T6401#176099 which explains why OpenPGP seems to behave differently than S/MIME.

again aheinecke:

aheinecke wrote regarding not showing the group at all (https://dev.gnupg.org/T6401#175847):

This was actually implemented in a similar way for T3490.

Sorry, done now

I have created a merge request for upstream to remove the useless "No date" option:
https://invent.kde.org/frameworks/kwidgetsaddons/-/merge_requests/213
I have added a patch with the changes to gpg4win, so that we do not have to wait for the fixed upstream version.

You forgot to add src/inst-pcre2.nsi and src/uninst-pcre2.nsi

This is in contrast to the behavior for "single" keys. An expired key is not listed as available for encryption at all.

This one is one me. I think the issue is gpgme-w32 spawn.

MRs:
https://invent.kde.org/pim/akonadi-calendar/-/merge_requests/73
https://invent.kde.org/pim/incidenceeditor/-/merge_requests/49

Hi, thank you so much and sorry for delay.
This beta is working for us perfectly.

After some investigation into what everyone else is doing, nobody seems to be using and supporting this property as of now. The big players (Google Calendar, Office365) abuse the Location field to store the URL for the onlin-meeting with alternative methods of joining the conference (e.g. dial-in numbers. etc) stored in the event description.

I guess we should add an extended API to set the filter.

This looks nice! One down...

Yes, works now ( VS-Desktop-3.2.0.0-beta from today):

works, I only see the error in debugview.
Furthermore, I use the occasion to point to T6493, Improvements on search window ;-)

Under Kleopatra -> Settings -> Configure Kleopatra -> GnuPG System -> In the Tab Secret Keys -> Is there either "Delete unused Passwords after N Seconds or Delete Passwords after N Seconds set to zero or the option "Do not use the password cache for signing" set? In this case this would be normal and expected behavior because it turns of the caching.

Thanks for the report and the helpful suggestion. I was anyway about to change the time format but your suggestion is better.

I am not sure whether we need to fix things in kleo but at some places gpg uses atoi() to parse the seconds since epoch. This should be fixed because that is the way gpgme provides the expiry time. I will also look into the ISO date string parser.

works: After generating a PIV key

gpg --edit-card

nevertheless shows the OpenPGP keys. Tested with gpg4win 4.2.0.

Aha, so you know how to provoke us into action, good man ;-) Alright I give it high priority. No seriously, makes sense to have we'll see when we can fit it in. Needs an extension in our internal api so probably not in the next release but sooner rather then later.

I guess I asked for it, because much older "PGP Desktop" had it already (via menu entry):

Maybe it's due to the fact that I used a non-admin installation? Actually I'm also surprised that it worked that way. What kind of debug logs could I supply?

works as described