[kdepim-users] S/MIME in KMail

[Ingo Klöcker]

On Tuesday 29 January 2008, Ingo Klöcker wrote:
> On Tuesday 29 January 2008, Roman Odaisky wrote:
> > Greetings,
> >
> > How does one add an S/MIME certificate to KMail? I followed any
> > possible HOWTOs to no success. Right now, Kleopatra shows three
> > certificates: mine and two ones that belong to the CA, KMail sees
> > them but when I try to send a message it says, "Signing failed:
> > General error".
> >
> > KWatchGnuPG gives a lot of messages, of which these seem the most
> > relevant:
> >
> > gpgsm[11807]: after checking the fingerprint, you may want to add
> > it manually to the list of trusted certificates.
> > gpgsm[11807]: interactive marking as trusted not enabled in
> > gpg-agent gpgsm[11807.0] DBG: -> ERR 67108962 Not trusted
> >
> > So, as far as I understand, it does not trust the CA that was used
> > to sign the certificate. How do I make GPG trust the issuer?
>
> One way to do this is to add
>   allow-mark-trusted
> to your gpg-agent.conf. From 'man gpg-agent':
>   --allow-mark-trusted
>     Allow  clients  to mark keys as trusted, i.e. put them into the
>     `trustlist.txt' file.  This is by default not allowed to make it
>     harder for users to inadvertly accept Root-CA keys.

See also
http://lists.gnupg.org/pipermail/gnupg-users/2004-September/023247.html


Regards,
Ingo
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 194 bytes
Desc: This is a digitally signed message part.
URL: <http://mail.kde.org/pipermail/kdepim-users/attachments/20080129/f8de5fba/attachment.sig>
-------------- next part --------------
_______________________________________________
KDE PIM users mailing list
kdepim-users at kde.org
https://mail.kde.org/mailman/listinfo/kdepim-users