Bug 331711

Summary:	Cannot import pkcs12 certificate(p12) which results in not working wpa enterprise connection.
Product:	[Applications] kleopatra	Reporter:	bartek1516
Component:	general	Assignee:	kdepim bugs <kdepim-bugs>
Status:	RESOLVED WORKSFORME
Severity:	major	CC:	aheinecke, mutz
Priority:	NOR
Version:	2.2.0
Target Milestone:	---
Platform:	Arch Linux
OS:	Linux
Latest Commit:		Version Fixed In:

Description bartek1516 2014-03-03 19:34:45 UTC

On my university we have eduroam network. We use personal certificates to enable connection. TLS WPA2 Enterprise it is. I simply cant use my private key(p12) it shows error decrypting certificate. Certificate is vaild. It works when I use openssl command line. It works on windows, ubuntu/mint. Basically nothing's wrong with it. On the same computer I have xfce4 on which it works. Only on kde it has problem. I used old and new network manager applet(new is buggy)
I guess it has something to do with kleopatra.
Importing normal CA certificate works though. Only private key has problems.

Reproducible: Always

Steps to Reproduce:
1. Connect to network using pksc12(p12) certificate/ Try to import pksc12 certificate
2.
3.
Actual Results:  
Error decrypting certificate.

Expected Results:  
Just import/connect to network

I don't know if its important but its manjaro distribiution of arch linux. It has the same packages though.

Comment 1 Andre Heinecke 2016-04-08 16:26:00 UTC

I can't reproduce this problem. I often test with p12 files and certificates in them.

One cause for this could have been gnome-keyring hjacking the gpg-agent which generally broke down S/MIME support in Kleopatra because all operations that worked with secret keys were broken for S/MIME

You might want to check out:
https://wiki.gnupg.org/GnomeKeyring

If you run:
echo $GPG_AGENT_INFO
and see the word keyring in the output you can be sure that this is the cause.

Comment 2 Andre Heinecke 2016-08-04 11:02:46 UTC

Resolving this as worksforme, I've tested it with multiple certificates and it worksforme. At least with a recent version 16.04 or 16.08.