Bug 453593

Summary:	Cannot import D-Trust Root CA, SubCA imports fine
Product:	[Applications] kleopatra	Reporter:	Erik Boritsch <erik>
Component:	general	Assignee:	Andre Heinecke <aheinecke>
Status:	RESOLVED NOT A BUG
Severity:	normal	CC:	mutz, pim-bugs-null
Priority:	NOR
Version First Reported In:	3.1.21.220400
Target Milestone:	---
Platform:	Neon
OS:	Linux
Latest Commit:		Version Fixed/Implemented In:
Sentry Crash Report:
Attachments:	Kleopatra cannot import this Root CA certificate

Description Erik Boritsch 2022-05-09 18:59:04 UTC

Created attachment 148689 [details]
Kleopatra cannot import this Root CA certificate

SUMMARY
***
I have created a certificate for qualified signature with "sign me" which uses D-TRUST certificate chain. I can import my certificate into kleopatra, I can import issuing CA's certificate, but I cannot import the Root CA of said certificate.

Certificates are located here: https://www.d-trust.net/en/support/repository

Import works: https://www.d-trust.net/cgi-bin/D-TRUST_CA_1-21-1_2021.crt
Import doens't work: https://www.d-trust.net/cgi-bin/D-TRUST_Root_CA_1_2021.crt

No error message except that the certificate is not imported.
***


STEPS TO REPRODUCE
1. Get Root CA certificate from https://www.d-trust.net/cgi-bin/D-TRUST_Root_CA_1_2021.crt
2. Try to import it into kleopatra


OBSERVED RESULT
Import fails

EXPECTED RESULT
Import successful

SOFTWARE/OS VERSIONS
Linux/KDE Plasma:  Neon 5.24
(available in About System)
KDE Plasma Version: 5.24.5
KDE Frameworks Version: 5.93.0
Qt Version: 5.15.3

ADDITIONAL INFORMATION
KDE Neon with all the updates.

Comment 1 Erik Boritsch 2022-05-09 19:10:27 UTC

gpgsm --import yields following error:
gpgsm: unknown hash algorithm '1.2.840.113549.1.1.10'

Comment 2 Erik Boritsch 2022-05-09 20:10:10 UTC

compiling and installing gpg version 2.3.6 (and modifying pathes in /etc/ld.so.conf.d/) solved the underlying issue. Not a kleopatra bug.