Re: Password length limit for certificates in Kleopatra

--nextPart3756446.dWV9SEqChM
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8"; protected-headers="v1"
From: Ingo =?UTF-8?B?S2zDtmNrZXI=?= <[email protected]>
To: [email protected]
Subject: Re: Password length limit for certificates in Kleopatra
Date: Fri, 12 Dec 2025 18:33:21 +0100
Message-ID: <2670998.XAFRqVoOGU@daneel>
In-Reply-To: <2284026.hkbZ0PkbqX@svarog>
References: <2284026.hkbZ0PkbqX@svarog>
MIME-Version: 1.0

On Freitag, 12. Dezember 2025 10:09:51 Mitteleurop=C3=A4ische Normalzeit Vo=
jt=C4=9Bch=20
Zeisek wrote:
> Hi,
> I need to use personal PKCS#12 certificates for signing mails in KMail, a=
nd
> I found one "funny" issue. Kleopatra has hard-coded limit of maximal
> password length of 31 characters, well it's hard-coded in gpgsm from GnuPG
> [1], which is the only tool to work with these certificates available for
> KDE PIM. I usually work with longer passwords, so this limit is bi
> annoying, and seems outdated as IDK any other recent tool with such a
> limit. Of course, I know I can "repack" the certificate and shorten the
> password using OpenSSL, but still, I wonder if there is any chance to get
> rid of this limit, either by updating the GnuPG, or if KDE PIM would use
> (also) another library to work with certificates (GnuTLS)...?
> Yours,
> V.
>=20
> [1] <https://github.com/gpg/gnupg/blob/master/sm/minip12.c#L340>

Thanks for the analysis of the problem! Please file a ticket at dev.gnupg.o=
rg.=20
Unfortunately, due to spammers it's a bit complicated to get an account the=
re,=20
but it's the correct place for reporting issues in GnuPG.

Regards,
Ingo
--nextPart3756446.dWV9SEqChM
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part.
Content-Transfer-Encoding: 7Bit

-----BEGIN PGP SIGNATURE-----

iJEEABYKADkWIQTbjgIOMowwlCBgvyGxb1mVFkdKugUCaTxR4RsUgAAAAAAEAA5t
YW51MiwyLjUrMS4xMSwyLDIACgkQsW9ZlRZHSrq21QEA6FZ9USCc1QS54qsXJWpg
PJLKakn+twp11J96TvTNUYYBAJHln4RmCv8dVYQzM35WY87n/v9Y29tcCJavW/gC
sA4D
=3u5M
-----END PGP SIGNATURE-----

--nextPart3756446.dWV9SEqChM--