[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-pim
Subject:    Re: [Kde-pim] Own CA and kgpgcertmanager
From:       Bernhard Reiter <bernhard () intevation ! de>
Date:       2003-07-25 20:01:12
[Download RAW message or body]

[Attachment #2 (multipart/signed)]


On Friday 25 July 2003 19:54, George Staikos wrote:
> On Friday 25 July 2003 09:37, Uri Shohet wrote:

> > I have a question about kmail + kssl-smime plugin + kgpgcertmanager.
> > If this is not the right list - please tell me where to post this
> > message.
> >
> > I've setup my own CA (Certificate Authority) for internal use in our
> > company. I've created CA Root Certificate and imported it into
> > KControl-Security- Crypto.
> > Then I've created two certificates for use with e-mails and exported them
> > into PKCS12 format and then imported the result UriShohet.p12 file into
> > KControl- Security-Crypto. My boss imported the other .p12 file into her
> > MS Outlook.
>
>   The Aegypten plugin doesn't support the KDE certificate database. 
> Wonderful isn't it? :)

Yes, it the Ägypten framework is a lot more general
and not exclusively useful for KDE.


> > I've compiled kdenonbeta/kssl-smime and configured my KMail to use it. I
> > can send signed and encrypted e-mails to my boss.
>
>    That's good to hear!

Was that the one with the licensing problem?

> > The problem:
> > ------------
> > After I got a signed e-mail from my boss I clicked on her key and
> > KGpgCertManager opened. After I double-clicked on the certificate, in
> > 'Additional Information for Key' box there is a button 'Import to Local',
> > but it's *disabled*, and in the Path tab it says in the first line 'Root
> > certificate not found (/CN=IL/ST=N/A/L=Jerusalem/....)'
> >
> > Why doesn't it find the Root certificate? 

It is true that the certmanager is really rudimentary.
It is based on what the gpgsm backend sees.

> > How can I import other's keys
> > into Local store?

Use gpgsm --import or search them with in the external keys
with the certmanager. The later only works if the right ldap
servers are in the distribution points or configured for the dirmngr
of the Ägypten framework.

>    KGPGCertManager does not use the KDE standard X.509 and SSL
> functionality. Sorry, it's unsupported.  It would be nice if someone could
> change KMail to use KDE's functionality.

It would be nice if someone could change KDE to use the more
useful Ägypten framework. :-)

More seriously this stuff has to merge sooner or later,
and the Ägypten stuff is supported to some level.
Please present a more balanced view.

["smime.p7s" (application/pkcs7-signature)]

_______________________________________________
kde-pim mailing list
kde-pim@mail.kde.org
http://mail.kde.org/mailman/listinfo/kde-pim
kde-pim home page at http://pim.kde.org/


[prev in list] [next in list] [prev in thread] [next in thread]