While working on https://dev.gnupg.org/T7962 I realized that https://dev.gnupg.org/T7717#208938 is probably not the best solution for separating the config files of different distributions of Kleopatra, Okular, etc. Changing the application name has many side effects, e.g. it changes the name of the config files, but that's unnecessary because we put the apps' files already in different folders. There are also other side effects that make things complicated (and require many changes in okular). Taking a step back what we need is different folders for VSD, GPD, and Gpg4win (and KDE Okular). And, for Kleopatra, we need different unique service IDs, but let's ignore this for now. That can easily be solved separately. For the different folders it would be sufficient (and maybe even nicer for selective backups) to use something like %(LOCAL)APPDATA%/GnuPG VS-Desktop, etc., as location for all apps' files of VSD/GPD/Gpg4win. Then we wouldn't have to change/patch anything in Okular (or any other Qt apps).

Fixed and backported for VSD 3.4.

Ranking as discussed with @ebo

The root cause is that opening the details reloads the certificate. This triggers a change of the key cache. And that triggers are reload of the group.

Backported for VSD 3.4

This is now implemented for Gpg4win 5.

They can be expanded/collapsed with +/-

Tested on gpg4win-5.0.0-beta413 @ win11 with the following entries in dirmngr.conf:

Ok, then this is only an issue in the VSD versions. (I confirmed with a quick test with Gpg4win-5.0.0-beta413)

It would be possible as a workaround in Kleopatra to show any identical entries only once. Saving after that will not add any more entries.

In T6568#208992, @timegrid wrote:

Still open in this ticket (see https://dev.gnupg.org/T6568#208755 ):

• Collapsible items in tree views can't be expanded/collapsed, at least not with space or arrow left/right

Still open in this ticket (see https://dev.gnupg.org/T6568#208755 ):

• Collapsible items in tree views can't be expanded/collapsed, at least not with space or arrow left/right
• Tab navigation in the Smartcard Dialog is broken

New tickets split from this:

• https://dev.gnupg.org/T7952 Make table column headings for other tables accessible
• https://dev.gnupg.org/T7953 Make table header column width accessible
• https://dev.gnupg.org/T7954 Highlight focused cell in tables

This seems to apply only for non vsd compliant algos. Importing and certifying a

• rsa/brainpool cert results in security level 4
• cv25519 cert results in security level 2

For our Okular, we should not use the standard file names (okularrc, …) as this would conflict with a regular Okular installation.

In T6568#208875, @timegrid wrote:

• Column sort order and visibility can be configured only via view and nowhere else. That's how it should be, right?

What do you mean?

The description says: The selection of visible columns and sorting should be possible **additionally** via the main menu.
I just wanted to make sure, "additionally" means additionally to the normal (non a11n accessible) context menu and not some other (a11n accessible) place i haven't found.

The preference option does already exist, it is "Prefer S/MIME". If not set (the default), then OpenPGP keys are preferred.

• Column sort order and visibility can be configured only via view and nowhere else. That's how it should be, right?

What do you mean?

In T6568#208750, @timegrid wrote:

Questions:

• Column sort order and visibility can be configured only via view and nowhere else. That's how it should be, right?

This isn't a Kleopatra issue. I suppose this happens with Outlook. The security confirmation checks for the type of keys it's asked for. Either OpenPGP or S/MIME or unspecified.

I also tried to check all tables i can find and it mostly looks good:

• Certificates Lists:
  • Main
  • Import ("Show imported")
  • Cert Selection (e.g. Sign as)
  • Keyserver Lookup
  • Smartcard
  • Groups (both available and in group)
• Certificate Details
  • User IDs
  • Sub-keys
  • Certifications

Looks good to me on gpg4win-5.0.0-beta413 @ win11.

Looks good to me on gpg4win-5.0.0-beta413 @ win11

Looks good to me on gpg4win-5.0.0-beta413 @ win11: The option is removed in the S/MIME tab.

Looks good to me on gpg4win-5.0.0-beta413 @ win11:

Still needs to be tested on VSD 3.4.

Looks good to me on gpg4win-5.0.0-beta413 @ win11

Backported for VSD 3.4.

This needs to be fixed in Kleopatra because we create our own config dialog using a generic page dialog.

Looks good to me on vsd-3.3.3-beta90.29 @ win11

For the open issue I have created T7890: Kleopatra: Icon sidebar in configuration dialog is missing an accessible name because it needs to be fixed upstream (in KDE Frameworks).

Correct, the fix is not included in beta395.

The option is still displayed on gpg4win-5.0.0-beta395 @ win11, probably the fix is not included yet.

Looks good to me on gpg4win-5.0.0-beta395 @ win11

Looks mostly good to me on gpg4win-5.0.0-beta395 @ win11.

nvda speech viewer output:

Related Addresses  tab control
Related Addresses  tab  Alt+  R
Related addresses  list
edward.tester@demo.gnupg.com  not selected

speech viewer:

Search missing keys when verifying a signature  check box  not checked  Alt+  S
X.509 Directory Services  grouping
Directory services  list  This is a list of all directory services that are configured for use with X.509.

Sounds good to me on gpg4win-5.0.0-beta395 @ win11

Looks good to me on gpg4win-5.0.0-beta395 @ win11

Looks good to me on gpg4win-5.0.0-beta395 @ win11

That's not surprising. The fix was made after GpgOL 2.6.7. And gpg4win-5.0.0-beta395 still seems to include GpgOL 2.6.6 only.

Issue is still present in gpg4win-5.0.0-beta395 @ win11:

Then I don't see how we can avoid this. It should be easy to reproduce this with gpgconf alone if you know how to use --change-options manually. Simply set the LDAP server that's already configured in the global config file.

gpgconf does not know about the global config files. Nor does it known about things like gpg.conf-2 etc.

The changes in libkleo and kleopatra are not included in gpg4win-5.0.0-beta395. Maybe the changes in gpg make the issue less likely. This should still be tested with the complete fix.

Looks good to me on gpg4win-5.0.0-beta395 @ win11

Looks good to me on gpg4win-5.0.0-beta395 @ win11 (tested with/without keyboxd, 20 keygen rsa3072 each, with/without password)

I guess this is easy to explain:

1. gpgconf/gpgme reads the LDAP server from the global config
2. You add a second LDAP server (I don't think it matters if it's the same as the one from the global config or different one)
3. When you save the LDAP server then gpgme/gpgconf writes both LDAP servers to the local config
4. When you now read the LDAP servers you get one from the global config and two from the local config