[issue197] key selector allows selection of clientAuth keys for encryption

New submission from Bernhard Herzog <[email protected]>:

The keyselector used in kmail tries to only allow keys usable for a given
purpose.  This doesn't work properly for certificates which have an
extendedKeyUsage that only contains clientAuth.  The attached file contains such
a certificate.  KMail lets the user select this certificate as an encryption
certificate even though it correctly disallows certificates that don't have
keyEncipherment in their keyUsage for instance.

When the a mail is sent and is to be encrypted with the attached certificate
gpgsm correctly rejects it.

----------
assignedto: marc
files: aegyptentest9-client-auth.pem
messages: 960
nosy: bh, marc
priority: bug
status: unread
title: key selector allows selection of clientAuth keys for encryption
topic: KMail
______________________________________________________
Aegypten issue tracker <[email protected]>
<https://intevation.de/roundup/aegypten/issue197>
______________________________________________________

_______________________________________________
Gpa-dev mailing list
[email protected]
http://lists.gnupg.org/mailman/listinfo/gpa-dev