[kdepim-users] KMail and X.509

Dominik Schulz lkml at ds.gauner.org
Wed Sep 3 08:13:25 BST 2008


Am Dienstag, 2. September 2008 13:52:08 schrieb Andreas Petzold:
> Quoting Dominik Schulz <lkml at ds.gauner.org>:
> > I can't get KMail to sign mails using my X.509 certificate, which is
> > working flawlessly for that purpose in e.g. T-Bird. Does anyone have some
> > hints for me
> > or a working tutorial or something like this? Everything I have found so
> > far didn't help me much.
> there are a couple if threads about this topic in the archives of this
> mailing list. It can be tricky to get s/mime to work in kmail :-) but
> it works (well it's most often not a problem of kmail but a problem of
> the parts that are used for the x.509 stuff).
>
> BTW, what is the problem/error message?
>
> Here are a few hints that I hope will help you to find/fix whatever is
> broken:
>
> * is gpg-agent running?
> * are you able to validate your cert in kleopatra?
> * have a look at kwatchgnupg, it will help you to determine the actual
> error, if all you get is "...failed. General Error"
Yes, indeed. I get an "General Error".

The gpg-agent is running and working. I'm using PGP/MIME with KMail and that 
is working just fine. My only problem right now are X.509/SMIME mails. I'm not 
exactly sure what you mean by "validate in kleopatra" but I did import my 
Certificate, private Key and the root Certificate (CACert) into Kleopatra and 
Konqueror (just in case that makes a difference) and they are shown as valid in 
the Certificate View.

KWatchGnuPG gives me some output but I'm not sure what is means.

  6 - 2008-09-03 09:08:27 gpgsm[14281]: DBG: BEGIN Certificate `target':
  <Information about my certificate>
  6 - 2008-09-03 09:08:27 gpgsm[14281]: DBG: END Certificate
  6 - 2008-09-03 09:08:27 gpgsm[14281]: DBG: gcry_pk_verify: Erfolg
  6 - 2008-09-03 09:08:27 gpgsm[14281]: No active Dirmngr - `/usr/bin/dirmngr' 
is being started
  6 - 2008-09-03 09:08:27 gpgsm[14281]: DBG: connection to dirmngr established
  6 - 2008-09-03 09:08:27 gpgsm[14281]: certificate #4F9F/CN=CAcert Class 3 
Root,OU=http://www.CAcert.org,O=CAcert Inc.
  6 - 2008-09-03 09:08:27 gpgsm[14281]: Die CRL konnte nicht geprüft werden: 
Konfigurationsfehler [The CRL couldn't be verified: Configuration error]
  6 - 2008-09-03 09:08:27 gpgsm[14281]: Benutztes Gültigkeitsmodell: Schale
  6 - 2008-09-03 09:08:27 gpgsm[14281.0] DBG: -> S INV_RECP 0 
1EFB19AD7A5D8F909FE1CC872C927F02FED7C737
  6 - 2008-09-03 09:08:27 gpgsm[14281.0] DBG: -> ERR 167772275 
Konfigurationsfehler <Dirmngr> [Configuration error]
  6 - 2008-09-03 09:08:27 gpgsm[14281.0] DBG: <- GETAUDITLOG --data --html
  6 - 2008-09-03 09:08:27 gpgsm[14281.0] DBG: -> ERR 50331706 Keine Daten 
<GPGSM>

It looks like something is wrong with Dirmngr, right?

-- 
Best Regards,
Dominik
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part.
URL: <http://mail.kde.org/pipermail/kdepim-users/attachments/20080903/b215c4f1/attachment.sig>
-------------- next part --------------
_______________________________________________
KDE PIM users mailing list
kdepim-users at kde.org
https://mail.kde.org/mailman/listinfo/kdepim-users


More information about the kdepim-users mailing list