| 1 |
On Sunday 20 of May 2007 13:24:09 Mick wrote: |
| 2 |
> Hi All, |
| 3 |
> |
| 4 |
> I am trying to get to grips with OpenSSL Certs in Kmail. I have created a |
| 5 |
> CA and then created and signed with it a certificate for my email account |
| 6 |
> (crt). Finally, I exported it as a pkcs12 bundle and tried to import it as |
| 7 |
> smime into Konqueror & Kmail. All went seemingly well, except for: |
| 8 |
> |
| 9 |
> 1. When I tried to specify which cert to use in |
| 10 |
> Kmail/Indentity/Cryptography I can see my imported Cert, but as I select it |
| 11 |
> a red X comes up on the key symbol. I assume then that it is not suitable |
| 12 |
> for smime |
| 13 |
> signatures/encryption? |
| 14 |
> 2. When I run gpgsm -K I get: |
| 15 |
> =========================================== |
| 16 |
> [snip] |
| 17 |
> validity: 2007-05-19 18:12:12 through 2010-05-18 18:12:12 |
| 18 |
> key type: 4096 bit RSA |
| 19 |
> key usage: [error: No value] |
| 20 |
> chain length: [error: No value] |
| 21 |
> =========================================== |
| 22 |
> |
| 23 |
> which is different to another certificate I have obtained from |
| 24 |
> www.cacert.org: =========================================== |
| 25 |
> validity: 2007-04-23 13:49:42 through 2007-10-20 13:49:42 |
| 26 |
> key type: 2048 bit RSA |
| 27 |
> ext key usage: emailProtection (suggested), clientAuth (suggested), |
| 28 |
> 1.3.6.1.4.1.311.10.3.4 (suggested), serverGatedCrypto.ms (suggested), |
| 29 |
> serverGatedCrypto.ns (suggested) |
| 30 |
> =========================================== |
| 31 |
> |
| 32 |
> Any ideas what I need to do to make this certificate valid for use by |
| 33 |
> Kmail? |
| 34 |
> |
| 35 |
> PS. I am not sure if the above errors mean that there is anything wrong |
| 36 |
> with my certificate, as opposed to Kmail & Kleopatra. Any certificate |
| 37 |
> signed messages that I receive are not verified in Kmail - all I get is: |
| 38 |
> ==================================================== |
| 39 |
> Not enough information to check signature. [Details] |
| 40 |
> |
| 41 |
> Status: No status information available. |
| 42 |
> ==================================================== |
| 43 |
> |
| 44 |
> If I press on [Details] Kleopatra pops up showing my cert. Selecting |
| 45 |
> Verify just shows "done". |
| 46 |
> |
| 47 |
> Have you managed to make smime work with Kmail at all? |
| 48 |
|
| 49 |
Hello |
| 50 |
|
| 51 |
Heh, I dealt with a similar problem about a week ago. I'm not sure I'll ever |
| 52 |
understand all these certificate issues that seem to crop up on just about |
| 53 |
all platforms I ever used. |
| 54 |
|
| 55 |
As, for the solution, it seem Kleopatra wants app-crypt/dirmngr, emerging it |
| 56 |
solved my problem. I'm not sure why relevant KDE apps don't depend on it. |
| 57 |
|
| 58 |
Hope this helps |
| 59 |
Jure |
Archives