Bug 458325

Summary: cannot import .p12 certificate
Product: [Applications] kleopatra Reporter: dacapito
Component: generalAssignee: Andre Heinecke <aheinecke>
Status: REPORTED ---    
Severity: major CC: mutz, orlando, pim-bugs-null
Priority: NOR    
Version First Reported In: unspecified   
Target Milestone: ---   
Platform: Ubuntu   
OS: Linux   
Latest Commit: Version Fixed/Implemented In:
Sentry Crash Report:

Description dacapito 2022-08-26 06:49:48 UTC 
SUMMARY
***
I possess a personal .p12 certificate and I have already imported it in a W10 version of Kleopatra. I wanted to import the same certificate in Kleopatra on a LINUX machine but I got the error message " Inappropriate ioctl for device ". I tried to backup the certificate from the W10 Kleopatra and import it in the LX-Kleopatra with teh same result. I tried to import it from teh command line with gpgsm --import < mycertificate.p12 and I got the same error message
***


STEPS TO REPRODUCE
1. import a .p12 certificate
2. 
3. 

OBSERVED RESULT
error message " Inappropriate ioctl for device ".

EXPECTED RESULT
certificate imported

SOFTWARE/OS VERSIONS
Windows: 
macOS: 
Linux/KDE Plasma: 
(available in About System)
KDE Plasma Version: 
KDE Frameworks Version: 
Qt Version: 

ADDITIONAL INFORMATION
Comment 1 Soyasi 2023-12-19 21:57:54 UTC 
I have the same problem with the free certificates in pfx or p12 format issued by actalis. For kleopatra to read them, I import them with the Windows 11 certificate manager and export them again with the private key, so if it reads them without problems. The only difference I see between the original and the one issued by Windows 11.

openssl pkcs12 -info -in certificado.pfx

*Original*

MAC: sha1, Iteration 102400
MAC length: 20, salt length: 20
PKCS7 Data
Shrouded Keybag: pbeWithSHA1And3-KeyTripleDES-CBC, Iteration 51200
Bag Attributes
    localKeyID: XX XX XX XX 
    friendlyName: XXXXX@gmail.com
Key Attributes: <No Attributes>
Enter PEM pass phrase:

-windows 11-

MAC: sha1, Iteration 2000
MAC length: 20, salt length: 20
PKCS7 Data
Shrouded Keybag: pbeWithSHA1And3-KeyTripleDES-CBC, Iteration 2000
Bag Attributes
    localKeyID: XX XX XX XX
    friendlyName: XXXX@gmail.com
    Microsoft CSP Name: Microsoft Enhanced Cryptographic Provider v1.0
Key Attributes
    X509v3 Key Usage: 10 
Enter PEM pass phrase:

You can get a free testing certificate on the next page:

https://extrassl.actalis.it/portal/uapub/freemail?lang=en