Bug 378775

Summary: kleopatra: search ignores the 'Name' entry of x509 certificats, fails to match '-' and does not show hits in collapsed x509 chains
Product: [Applications] kleopatra Reporter: Achim Bohnet <ach>
Component: generalAssignee: Andre Heinecke <aheinecke>
Status: RESOLVED FIXED    
Severity: normal CC: kdepim-bugs, mutz
Priority: NOR    
Version: 2.3.0   
Target Milestone: ---   
Platform: Neon   
OS: Linux   
Latest Commit: Version Fixed In: 17.04
Attachments: example data set used in bug description

Description Achim Bohnet 2017-04-14 12:38:04 UTC
Created attachment 105023 [details]
example data set used in bug description

Attached screenshot is used to illustrate the bugs:

1) Search for my name 'achim' only shows the opengpg keys, not the my x509 key
   Should list x509 key too.   Searching for 'Telekom' finds nothing.

2) Search for mpg-ca should match due to the e-mail of 'MPG CA' in my cerificate chain. Bug: search result is empty. 

3) By default X509 chains are not expanded, only the Root cert is shown. If I search for something that matches in the X509 trust chain, the chain is not expanded to show the matching entry.
Comment 1 Achim Bohnet 2017-04-15 13:47:05 UTC
Same problem when I turn off: View -> Hierarchical Ceritificate List

Search e.g. for my first name and my X509 cert isn't shown. Only my openpgp certs.
Comment 2 Andre Heinecke 2017-04-18 12:51:02 UTC
Thanks for your reports.

Indeed the search problems 1 / 2 are a regression, we now matches any part of the DN additionally to E-Mails.

> 3) By default X509 chains are not expanded, only the Root cert is shown. If I 
> search for something that matches in the X509 trust chain, the chain is not 
> expanded to show the matching entry.

This is a bit unrelated and was always the case but I agree. I've opened bug 378924 to track this separately as I want to close this bug with fixed search.