Merged to master for 23.12 as it includes new UI and translations strings.

Both PR merged into master, fix will be in 23.12 (the fix required cross-library API changes)

With current VS-Desktop-3.2.0.0-beta229/231 this does not work for me. Neither for RSA 2048 nor 3072.
The CSR buttons are greyed out

Choosing Curve 25519 results in a general error btw.

works, either name or email is enough

fwiw: For a Netkey 3.0 card with expired RSA 2048 certificates, CSR creation is not offered.

I am wondering a bit about the gpg: DBG: chan_3 <- ERR 100696144 Operation not supported by device <SCD> which is not the string I expected for this error:

With the above changes a group with an expired key is now expanded. But, as in T6742, the key is shown with the blue info icon instead of with a red X icon and the OK button is enabled.

Pushed the change into kem-kyber branch.
https://dev.gnupg.org/source/libgcrypt/history/kem-kyber/

Applied to 2.4, too.

closing this ticket, diagnostic output is there, for improvements see T6749

The error dialog has the "Show Audit Log" button now and it shows error messages but now the user gets two audit logs:

I forgot to backport one patch. With that patch we get what we expect:

C++ bindings also done.

Core part done.

And the filter for the key selection has to be checked. Also compare T6743

We decided what aheinecke wrote before: The key group name should be displayed with a red X and the encryption button should be disabled as long as encryption is not possible.