s/mime certificate import fail

nblock · 2009-12-16 17:19:45

Hi,
i got my now startssl s/mime certificate today.

I exported it from firefox to my homedirectory and tried to import it with gpgsm:

gpgsm --import cert.p12
gpgsm: DBG: connection to agent established
gpgsm: gpgsm: GPG_TTY wurde nicht gesetzt - ein (möglicherweise falscher) Standardwert wird deshalb verwendet
gpgsm: gpg-protect-tool: 1224 bytes of 3DES encrypted text
gpgsm: gpg-protect-tool: decryption failed; trying charset `ISO-8859-1'
gpgsm: gpg-protect-tool: decryption failed; trying charset `ISO-8859-15'
gpgsm: gpg-protect-tool: decryption failed; trying charset `ISO-8859-2'
gpgsm: gpg-protect-tool: decryption failed; trying charset `ISO-8859-3'
gpgsm: gpg-protect-tool: decryption failed; trying charset `ISO-8859-4'
gpgsm: gpg-protect-tool: decryption failed; trying charset `ISO-8859-5'
gpgsm: gpg-protect-tool: decryption failed; trying charset `ISO-8859-6'
gpgsm: gpg-protect-tool: decryption failed; trying charset `ISO-8859-7'
gpgsm: gpg-protect-tool: decryption failed; trying charset `ISO-8859-8'
gpgsm: gpg-protect-tool: decryption failed; trying charset `ISO-8859-9'
gpgsm: gpg-protect-tool: decryption failed; trying charset `KOI8-R'
gpgsm: gpg-protect-tool: decryption failed; trying charset `IBM437'
gpgsm: gpg-protect-tool: decryption failed; trying charset `IBM850'
gpgsm: gpg-protect-tool: decryption failed; trying charset `EUC-JP'
gpgsm: gpg-protect-tool: decryption failed; trying charset `BIG5'
gpgsm: gpg-protect-tool: data error at "decrypted-text", offset 1674352659
gpgsm: gpg-protect-tool: error at "bag-sequence", offset 15
gpgsm: gpg-protect-tool: error parsing or decrypting the PKCS-12 file
gpgsm: Fehler bei Ausführung von `/usr/lib/gnupg2/gpg-protect-tool': Endestatus 2
gpgsm: gesamte verarbeitete Anzahl: 0
secmem usage: 0/16384 bytes in 0 blocks

i then tried to install it with kleopatra which didn't work eiter: „encryption failed"

However, importing it again in firefox works…

any ideas?

Samuel from beteigeuze · 2010-01-06 20:15:36

I've got the same problem, when I want to import my X.509-certificate from CACert in Kleopatra a window is popping up saying "Decryption failed" (translated from the German "Entschlüsselung fehlgeschlagen"). If somebody has got a solution to this error, I'd be happy to know it. This seems to be a bigger problem with *.p12-files in Kleopatra, because Google is finding very much stuff.

nblock · 2010-01-06 20:44:06

i tried to import my old thawte-certs, which worked flawlessly with gpgsm and kleopatra a year ago. i tried to import them today, with the same result: "Decryption failed". Very strange …

nblock · 2010-01-22 00:02:22

i managed to install my cert with the following trick:

killall gpg-agent     #make sure all of them are dead!
gpg-agent --daemon /bin/sh
gpgsm --import cert

i don't know why this is working. but it does.

i'll try to figure out what is wrong with my setup and then post it here!

Samuel from beteigeuze · 2010-01-22 23:26:42

Thanks very much, your workaround is fixing my issue and I was finally able to import my certificate into Kleopatra.

Edit: I unfortunately don't get my certificate opened when I try to defin it as my standard-cert in KMail-settings. There is an icon with a key and a yellow question-mark on it when I try to select it from the KMail-settings, but when I click on it it becomes a red "x" and the "OK"-Button is disabled.

Last edited by Samuel from beteigeuze (2010-01-23 16:02:30)

nblock · 2010-01-28 09:21:50

i have a similar problem when using my imported cert with kmail. I can configure it, but i can not open it. It claims, that the password is wrong. And no, i enter the correct password …

Samuel from beteigeuze · 2010-02-20 10:05:10

After following the instructions described here: http://salout.github.com/blog/2009/11/1 … kmail.html I was able to get my certificate finally configured. But unfortunately I've got the same problem as nblock; KMail says my password was wrong.
If I try to change my password from kleopatra the same error appears when the program asks for the old password which I want to change. In this case, another additional windiow appears after cancelling the pinentry. It claims that the output of /us/bin/gpgsm is:

gpgsm: enabled debug flags: assuan gpgsm: DBG: connection to agent established gpgsm: error changing passphrase: Verarbeitung wurde abgebrochen: secmen usage: 0/16384 bytes in 0 blocks

"Verarbeitung wurde abgebrochen" means "processing was cancelled" in English. I hope that somebody can help me/us.

nblock · 2010-07-24 09:30:38

has anyone been able to find a working solution?

Arch Linux

#1 2009-12-16 17:19:45

s/mime certificate import fail

#2 2010-01-06 20:15:36

Re: s/mime certificate import fail

#3 2010-01-06 20:44:06

Re: s/mime certificate import fail

#4 2010-01-22 00:02:22

Re: s/mime certificate import fail

#5 2010-01-22 23:26:42

Re: s/mime certificate import fail

#6 2010-01-28 09:21:50

Re: s/mime certificate import fail

#7 2010-02-20 10:05:10

Re: s/mime certificate import fail

#8 2010-07-24 09:30:38

Re: s/mime certificate import fail

Board footer