[kmail2] [Bug 324424] i can not select my S/MIME certificate for Email Signature

[Leopold Goetze]

https://bugs.kde.org/show_bug.cgi?id=324424

--- Comment #12 from Leopold Goetze <leo at goetze.co.uk> ---
(In reply to Enrico Tagliavini from comment #11)
> Hi Leopold,
> 
> I had this problem as well at some point, I'm not entirely sure I sorted it
> out though. The problem is at gpg level I think, since gpgsm was complaining
> as well about my key. It was reporting the public part of the key was
> missing (which makes little sense to me).
> 
> You should be able to reproduce with:
> 
> gpgsm --local-user <your key id, find it with gpgsm -K>
> 
> For sure I performed the following actions multiple times and in different
> order, at some point I realized it was working again:
> 
>  - from kleopatra sign a file with the key you need (I think this is likely
> what helped most, but I can't be sure)
>  - remove your certificate and import it again from kleopatra
>  - remove it from the command line (by rm -rf the private key file)
>  - import it from the command line with gpgsm, both public and private parts
>  - removed and added the CA back
> 
> So I would suggest to investigate what kleopatra is reporting about your
> certificate and if you are able to sign stuff with it. Same with straight
> gpgsm command, to check the components kmail is using are actually working.

Many thanks for your comments, Enrico
Checking with gpgsm I found my private key missing. However, it was quite
tricky to finally import it. The following command(s) did the trick:
# Execute the following two commands, where cert.p12 is the 
# certificate file you exported in Firefox and password is 
# the password it is encrypted with.
openssl pkcs12 -in cert.p12 | gpgsm --import
gpgsm --call-protect-tool --p12-import --store -P password cert.p12
I found them referenced on
http://forum.ubuntuusers.de/topic/gpgsm-importieren-schlaegt-fehl/
Best regards
Leo

-- 
You are receiving this mail because:
You are the assignee for the bug.