Kleopatra refuses to trust CA certificate caused by: --- 9235E2318411ABFE7D14B7BA3F7075FD7D4D6B34 -> 92:35:E2:31:84:11:AB:FE:7D:14:B7:BA:3F:70:75:FD:7D:4D:6B:34 QString change_trust_file(const QString&, const QString&, GpgME::Key::OwnerTrust): 9235E2318411ABFE7D14B7BA3F7075FD7D4D6B34 != 23:A4:87:CF:FC:01:ED:00:89:F5:39:E3:54:1B:CB:FC:44:93:1C:61 != 92:35:E2:31:84:11:AB:FE:7D:14:B7:BA:3F:70:75:FD:7D:4D:6B:34 QString change_trust_file(const QString&, const QString&, GpgME::Key::OwnerTrust): line "" does not match [...] --- Inspecting the certificate with Kleopatra shows 'Issuer: CN=ROOT_CA_DBS_Integration,O=Volkswagen,L=Wolfsburg,ST=Niedersachsen,C=DE' and 'Subject: CN=ROOT_CA_DBS_Integration,L=Wolfsburg,SP=Niedersachsen,O=Volkswagen,C=DE'. But the certificate in fact is 'Issuer: C=DE, ST=Niedersachsen, L=Wolfsburg, O=Volkswagen, CN=ROOT_CA_DBS_Integration' and 'Subject: C=DE, ST=Niedersachsen, L=Wolfsburg, O=Volkswagen, CN=ROOT_CA_DBS_Integration' using openssl. Reproducible: Always Steps to Reproduce: 1. Create a (self signed) CA certificate using openSSL with a subject, issuer like above. 2. Import in Kleopatra. 3. Declare the CA certificate as trusted.
May be you could try the CA itself: -----BEGIN CERTIFICATE----- MIIGpDCCBIygAwIBAgIJAPgjLzdL4UZJMA0GCSqGSIb3DQEBBQUAMHAxCzAJBgNV BAYTAkRFMRYwFAYDVQQIEw1OaWVkZXJzYWNoc2VuMRIwEAYDVQQHEwlXb2xmc2J1 cmcxEzARBgNVBAoTClZvbGtzd2FnZW4xIDAeBgNVBAMUF1JPT1RfQ0FfREJTX0lu dGVncmF0aW9uMB4XDTExMDQyMTEzMTI0N1oXDTIxMDQxODEzMTI0N1owcDELMAkG A1UEBhMCREUxFjAUBgNVBAgTDU5pZWRlcnNhY2hzZW4xEjAQBgNVBAcTCVdvbGZz YnVyZzETMBEGA1UEChMKVm9sa3N3YWdlbjEgMB4GA1UEAxQXUk9PVF9DQV9EQlNf SW50ZWdyYXRpb24wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCzzf2O SkIHddB0mTgRzcPyNiRiMMy9hojjB3Uxcg+O76Xfn5sXQRY0drJ0vnkbQRqZfgwn Gz2FquB+W4ZvAJ/AkkL8Wn9/Wczn6SGfFCY1N3xGLvjis7izmehu+lW7NNjXVTii bO/V336sZCTbiU/kyNVmE3ubE8Sot0qcLfDOEAVO4q/JOMtjlMKVsuapvTg9Hgwg cn0NA/1+sJ8GGhMGvGu8iCc8vqDZDvZfg3Is8RxCVV9ua/cJ7YzB5UfGoGD6dk8N a9WevUvIH8akE2iJzuCb9cb+6t/fCb8je1nfk12+MKBrxKsRCGTqxbvhGrQ8XmmU boGB/IwuT/477mWPO966HzGQfi5VV97zB6g+E7wFjej2r8GYSr5GSMM1QRf41HY0 ZkrYDXw5xyV7unxf1eTrBt8yGJiS9O6shGxq3GStICJWKlmLYkNEfCpt+L+f6X2C mTpIJa4ZMsmRT+1RVWIvLLO34vkMrz+up/YuX4WpQo0iR9Soa54Q86fkQkybxxNs usKI/6bQE3KCvXT92tudw0UqEqvJXkND33kdl4B0KHyKy83nqm0Sjt1JDqNRhq4l 4ctQNoDwIJrSvMLsOSOIkNlBkA8vo+jNx6KpfwFD1lu7UZ2tTuTnjcW6SVtat9RL 2rqifZJ8w6FKoB1J9a9QY37IISvokH7bB4VxBQIDAQABo4IBPzCCATswHQYDVR0O BBYEFNpfyvAJV253JCmI/hhAIaCaplshMIGiBgNVHSMEgZowgZeAFNpfyvAJV253 JCmI/hhAIaCaplshoXSkcjBwMQswCQYDVQQGEwJERTEWMBQGA1UECBMNTmllZGVy c2FjaHNlbjESMBAGA1UEBxMJV29sZnNidXJnMRMwEQYDVQQKEwpWb2xrc3dhZ2Vu MSAwHgYDVQQDFBdST09UX0NBX0RCU19JbnRlZ3JhdGlvboIJAPgjLzdL4UZJMA8G A1UdEwEB/wQFMAMBAf8wEQYJYIZIAYb4QgEBBAQDAgEGMAkGA1UdEgQCMAAwKwYJ YIZIAYb4QgENBB4WHFRpbnlDQSBHZW5lcmF0ZWQgQ2VydGlmaWNhdGUwCQYDVR0R BAIwADAOBgNVHQ8BAf8EBAMCAQYwDQYJKoZIhvcNAQEFBQADggIBADTGMUAGNIVP c29u9xeH+AZ/7uXFdhb3rDYLDP5kJDX0S1tA0avlazXI7mG/1JHhXb3JMB1WQV7C cwK+8AdE3B3TGeeOmcWumwayo72rC5MwGfyVoFXeFr0/yGZKFcDo9vJbiv0C79qB 0tLUcLCUv6Sz55/s2r3fvWVBjT6QFj3Hd0ZIuLpVkT1GN7RMHFaS3zUc0FvLgnt5 DCfajgqIX8PreB0hOQkfZ5f+rRGlfixyaQlJk+1GeuNWAg6YCKhqQocj9Qat9ng1 cNtJC6NJbHF5sw8aCFJV0ziL7DTOkLwntdUy5wVYQuMUWBE1LcTRaac+LacGMdvp ux9ZPMc8fObU5DmJuCDIJI1aGT60D6IY1BjHNgz1jCs79cW0wHnxpsp9n3wH8K27 hsUas7f9WdTPS4jPFlwRlmoMvIMtar25ikaRYYW1ZdoNsFaID2UQ5b6LkMRgdT9P 5MCP2TxzJTAHtuQFG/pJwy7gKwPrKdWS2/+6jsPebW5VG7fGVfmhzJeGb53VuQkL MasWqw/CHOkWbXsSHda8ApiOw22ihscTcTMCLK5ejL3BhjbxwV1UTRWVP7DfXg3A lYWhN80zAs/gMTIW+FgsNAnE53iJBEWqVzvh3RNl46P9r72gMIYxkbXEDykCz84L MWrnrg9c+ZV7Vn4Gu8ESFdn39sLzXbWS -----END CERTIFICATE-----
I'll check this issue with current Kleopatra and Gpg4win.