Bug 453593 - Cannot import D-Trust Root CA, SubCA imports fine
Summary: Cannot import D-Trust Root CA, SubCA imports fine
Status: RESOLVED NOT A BUG
Alias: None
Product: kleopatra
Classification: Applications
Component: general (show other bugs)
Version: 3.1.21.220400
Platform: Neon Linux
: NOR normal
Target Milestone: ---
Assignee: Andre Heinecke
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2022-05-09 18:59 UTC by Erik Boritsch
Modified: 2022-05-09 20:10 UTC (History)
2 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments
Kleopatra cannot import this Root CA certificate (1.62 KB, application/pkix-cert)
2022-05-09 18:59 UTC, Erik Boritsch
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Erik Boritsch 2022-05-09 18:59:04 UTC
Created attachment 148689 [details]
Kleopatra cannot import this Root CA certificate

SUMMARY
***
I have created a certificate for qualified signature with "sign me" which uses D-TRUST certificate chain. I can import my certificate into kleopatra, I can import issuing CA's certificate, but I cannot import the Root CA of said certificate.

Certificates are located here: https://www.d-trust.net/en/support/repository

Import works: https://www.d-trust.net/cgi-bin/D-TRUST_CA_1-21-1_2021.crt
Import doens't work: https://www.d-trust.net/cgi-bin/D-TRUST_Root_CA_1_2021.crt

No error message except that the certificate is not imported.
***


STEPS TO REPRODUCE
1. Get Root CA certificate from https://www.d-trust.net/cgi-bin/D-TRUST_Root_CA_1_2021.crt
2. Try to import it into kleopatra


OBSERVED RESULT
Import fails

EXPECTED RESULT
Import successful

SOFTWARE/OS VERSIONS
Linux/KDE Plasma:  Neon 5.24
(available in About System)
KDE Plasma Version: 5.24.5
KDE Frameworks Version: 5.93.0
Qt Version: 5.15.3

ADDITIONAL INFORMATION
KDE Neon with all the updates.
Comment 1 Erik Boritsch 2022-05-09 19:10:27 UTC
gpgsm --import yields following error:
gpgsm: unknown hash algorithm '1.2.840.113549.1.1.10'
Comment 2 Erik Boritsch 2022-05-09 20:10:10 UTC
compiling and installing gpg version 2.3.6 (and modifying pathes in /etc/ld.so.conf.d/) solved the underlying issue. Not a kleopatra bug.