You are not logged in.

#1 2012-10-10 23:06:56

Andrenas
Member
From: Coimbra, Portugal
Registered: 2011-03-14
Posts: 19

[PARTIALY SOLVED] Gpgsm and Kleopatra error on import p12 (X.509) cert

Hello everyone.

Currently I use KDE 4.9.2, and the system is fully updated. Since some time ago, I have been trying to import an X.509 certificate, that I need to use the mail without success.

When I try the gpgsm (gnupg 2.0.19-2) this happens:

gpgsm --import foo.p12 
gpgsm: enabled debug flags: assuan
gpgsm: DBG: connection to agent established
gpgsm: gpgsm: GPG_TTY has not been set - using maybe bogus default
gpgsm: gpg-protect-tool: error while asking for the passphrase: End of file
gpgsm: error running `/usr/lib/gnupg/gpg-protect-tool': exit status 2
gpgsm: total number processed: 0
secmem usage: 0/16384 bytes in 0 blocks

If I try directly by Kleopatra (kdepim-kleopatra 4.9.2-1) appears the following error: "Decryption failed".

The gpg-agent is running and all tests done by Kleopatra gave ok.

I know there are already a few threads on this subject. However, it seems to me that in this case the problem is in the gpg-protect-tool, as it appears in the error made by gpgsm.

After some research I found this bug reported at the following site:

https://bugzilla.redhat.com/show_bug.cgi?id=548528

In comment # 43 was created a patch that seems to have solved the problem.

But I do not know anything about programming and do not know how I can use the patch to see if it solves the problem.

So, I ask your help to verifying if the problem is in gpg-protect-tool, and if so, how can I solve it?

Thank you.

Last edited by Andrenas (2012-10-11 12:41:48)

Offline

#2 2012-10-11 12:38:43

Andrenas
Member
From: Coimbra, Portugal
Registered: 2011-03-14
Posts: 19

Re: [PARTIALY SOLVED] Gpgsm and Kleopatra error on import p12 (X.509) cert

I apply the patch, indicated in the previous post, to gnupg (and rebuild the package) and now I can import the certificate.

So, the problem was even nominated.

However, now I can not do kleopatra trust the root certificate ...

Does anyone know how I can do?

Regards

Offline

Board footer

Powered by FluxBB