[Bug 287145] New: kleopatra reports valid signature from unknown openpgp certificate

[Alberto Ronzani]

https://bugs.kde.org/show_bug.cgi?id=287145

           Summary: kleopatra reports valid signature from unknown openpgp
                    certificate
           Product: kleopatra
           Version: unspecified
          Platform: Ubuntu Packages
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: minor
          Priority: NOR
         Component: general
        AssignedTo: kdepim-bugs at kde.org
        ReportedBy: alberto.ronzani at gmail.com
                CC: mutz at kde.org


Created an attachment (id=65899)
 --> (http://bugs.kde.org/attachment.cgi?id=65899)
signed files and screenshot

Version:           unspecified (using KDE 4.7.3) 
OS:                Linux

I have an offline primary key with a signing subkey on an openpgp smartcard.
Gpg has those keys marked as ultimately trusted.

When instructed to verify a file clearsigned with said key, kleopatra shows the
signature as valid, but coming from an unknown certificate.

If the signature was made with an "online" primary key (i.e., effectively
stored under an on-disk secring file) kleopatra shows correct behavior,
reporting valid signature from a known certificate.

Kleopatra correctly recognises the openpgp details in the certificate list
view.

Reproducible: Always

Steps to Reproduce:
0) have offline primary key with signing subkey on openpgp smartcard
1) create test cleartext file
2) clearsign with gpg2 --clearsign test_cleartext.txt
3) verify the signature with kleopatra

Actual Results:  
kleopatra reports valid signature from unknown certificate

Expected Results:  
kleopatra should report valid signature from a known certificate

The offline primary key + smartcard subkeys were generated following the howto
found at the following URL:
http://wiki.fsfe.org/Card_howtos/Card_with_subkeys_using_backups

Attached: related cleartext, clearsigned files and screenshot.

-- 
Configure bugmail: https://bugs.kde.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.