Kmail and smime

[Vojtěch Zeisek]

Hello

Dne pátek 27. února 2026 11:46:12, středoevropský standardní čas, Sebastian 
Gödecke napsal(a):
> Hi,
> i've a smime cert and try to use it with Kontakt/Kmail. It is
> imported in Kleopatra and there is everything okay.
> So i set it up in kmail to use this cert and when i try to write
> an email, my email will be added with this smime.p7s and
> has the signitar. So i send my mail, have to type my password
> for this cert and then it will be sent. So i try it now to send
> it to me and then it's a red sign, and it says: The signature
> is invalid: Incorrect signature
> So i try my smime with outlook in windows and in betterbird
> here on my Manjaro KDE and with both apps it's working.
> Only with kmail there is this problem.
> Any idea where i could have a look in my settings? The smime setting
> in kmail is filled with my smime-cert and this is "green", any other
> option i could check maybe "default-domain" (i changed it now to
> our real domain but this didn't work) or anything else?
> Many thanks for some responses.

KMail/Kleopatra is internally relying GnuPG, while default settings in 
~/.gnupg/dirmngr.conf and ~/.gnupg/gpgsm.conf are often more in favor of GPG 
keys, and not S/MIME certificates, so I'd check if You have there disable-http 
and/or disable-ldap (to be deleted), or missing allow-ocsp (to be added) in 
dirmngr.conf. In gpgsm.conf I'd ensure there is no disable-crl-checks, and 
possibly add enable-crl-checks and enable-ocsp. Restart with "gpgconf –kill 
dirmngr && gpgconf –launch dirmngr". It can be pretty tricky to get everything 
set correctly... :-/
and what does it mean " to send it to me"? If the mail returned via e-mail 
conference or so, the failed check can be because of added [XXX] into subject, 
some added footer or so...

-- 
Vojtěch Zeisek
https://trapa.cz/

Komunita openSUSE GNU/Linuxu
Community of the openSUSE GNU/Linux
https://www.opensuse.org/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 870 bytes
Desc: This is a digitally signed message part.
URL: <http://mail.kde.org/pipermail/kdepim-users/attachments/20260227/cf331556/attachment.sig>