[Bug 584027] Re: Kmail silently rejects S/MIME Certificate

[Nicola Chiapolini]

I had the same problem with my self-sgined certificate. Fix for me was:

*) activate allow-trust as above:
configure kleopatra to trust you as a signing autority
  Settings > Configure Cleopatra > GnuPG System > GPG Agent > [x] Allow clients to mark keys as "trusted"
restart
On restart you will be asked which keys you want to trust. Trust your self, maybe trust others
(this will create a file ~/.gnupg/trustlist.txt storing your choices, you can adjust them there later, if you want.)

*)  problem specific to self-sgined certificates (I guess):
tell dirmngr to stop looking for a CRL for you
  vim  ~/.gnupg/trustlist.txt
append 'relax' at the end of the line containing the fingerprint for your key
(see man-page for gpgsm, option '--disable-trusted-cert-crl-check')
restart gpg-agent
  gpgconf --reload gpg-agent  
(no sudo), or restart the system 

After this selecting keys in kmail works as expected.

PS: To get some clue about what is going on, you can use the GPG Log viewer:
start log-viewer in kleopatra
(e.g. when kmail fails to select the key you want and shows red crosses without any helpfull feedback) 
  Tools > GnuPG Log Viewer

-- 
You received this bug notification because you are a member of Kubuntu
Bugs, which is subscribed to kdepim in Ubuntu.
https://bugs.launchpad.net/bugs/584027

Title:
  Kmail silently rejects S/MIME Certificate

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/kdepim/+bug/584027/+subscriptions