Bug 458325 - cannot import .p12 certificate
Summary: cannot import .p12 certificate
Status: REPORTED
Alias: None
Product: kleopatra
Classification: Applications
Component: general (show other bugs)
Version: unspecified
Platform: Ubuntu Linux
: NOR major
Target Milestone: ---
Assignee: Andre Heinecke
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2022-08-26 06:49 UTC by dacapito
Modified: 2023-12-19 21:57 UTC (History)
3 users (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description dacapito 2022-08-26 06:49:48 UTC
SUMMARY
***
I possess a personal .p12 certificate and I have already imported it in a W10 version of Kleopatra. I wanted to import the same certificate in Kleopatra on a LINUX machine but I got the error message " Inappropriate ioctl for device ". I tried to backup the certificate from the W10 Kleopatra and import it in the LX-Kleopatra with teh same result. I tried to import it from teh command line with gpgsm --import < mycertificate.p12 and I got the same error message
***


STEPS TO REPRODUCE
1. import a .p12 certificate
2. 
3. 

OBSERVED RESULT
error message " Inappropriate ioctl for device ".

EXPECTED RESULT
certificate imported

SOFTWARE/OS VERSIONS
Windows: 
macOS: 
Linux/KDE Plasma: 
(available in About System)
KDE Plasma Version: 
KDE Frameworks Version: 
Qt Version: 

ADDITIONAL INFORMATION
Comment 1 Soyasi 2023-12-19 21:57:54 UTC
I have the same problem with the free certificates in pfx or p12 format issued by actalis. For kleopatra to read them, I import them with the Windows 11 certificate manager and export them again with the private key, so if it reads them without problems. The only difference I see between the original and the one issued by Windows 11.

openssl pkcs12 -info -in certificado.pfx

*Original*

MAC: sha1, Iteration 102400
MAC length: 20, salt length: 20
PKCS7 Data
Shrouded Keybag: pbeWithSHA1And3-KeyTripleDES-CBC, Iteration 51200
Bag Attributes
    localKeyID: XX XX XX XX 
    friendlyName: XXXXX@gmail.com
Key Attributes: <No Attributes>
Enter PEM pass phrase:

-windows 11-

MAC: sha1, Iteration 2000
MAC length: 20, salt length: 20
PKCS7 Data
Shrouded Keybag: pbeWithSHA1And3-KeyTripleDES-CBC, Iteration 2000
Bag Attributes
    localKeyID: XX XX XX XX
    friendlyName: XXXX@gmail.com
    Microsoft CSP Name: Microsoft Enhanced Cryptographic Provider v1.0
Key Attributes
    X509v3 Key Usage: 10 
Enter PEM pass phrase:

You can get a free testing certificate on the next page:

https://extrassl.actalis.it/portal/uapub/freemail?lang=en