Tuesday, March 07, 2006 at 01:19 AM
While trying to import my CACert certificate on my laptop into Kleopatra I encountered a few misleading error messages. I have collected the messages like
General error and noted how I work around them.
Generally speaking, running KWatchGnuPG and reading the debug messages can be very helpful.
Checking for gpg-agent
netstat -ap | grep gpg-agent should display something like this:
unix 2 [ ACC ] STREAM LISTENING 25772 7963/gpg-agent /tmp/gpg-A4VF5u/S.gpg-agent
Decryption failed while trying to import the key
If this message appears before you are prompted for the passphrase, make sure gpg-agent is setup and running. Try runing
eval "$(gpg-agent --daemon --allow-mark-trusted)" in
konsole and start
kloepatra from the same shell.
If this message appears after you are prompted for the passphrase, that your passphrase is correct and you are using the latest version of gpgsm (>= 1.9.20). I got this error that was fixed by a dist-upgrade:
gpgsm: gpg-protect-tool: error at "bags", offset 24 XXXXXXXXXXXXXXXXX
gpgsm: gpg-protect-tool: error parsing or decrypting the PKCS-12 file
Signing failed: General error
Encryption failed: Configuration error
KMail -> Configure KMail -> Security -> S/MIME Validation
Never consult a CRL