Bugzilla Bug 120587

KMail's certificate manager, kde-base/kcertmanager (a.k.a. Kleopatra), doesn't
work without S/MIME support. When you try to start Kleopatra in KDE 3.4.3, you
get a dialog box saying "The crypto plugin could not be initialized.
Certificate Manager will terminate now.", and Kleopatra exits immediately. In
KDE 3.5.0, a dialog box says "An error occurred while fetching the certificates
from the backend: Unsupported protocol", and the Kleopatra window appears but
is nonfunctional.

The only place Kleopatra seems to be looking for S/MIME support is in GPGME
(app-crypt/gpgme), which doesn't have it. To build GPGME with S/MIME support,
you must install (the hard-masked) GnuPG >= 1.9 (app-crypt/gpgme) with S/MIME
support and change the GPGME ebuild to accept the "smime" USE flag (which is
currently present but commented out). Additionally, to build GnuPG 1.9.20 with
S/MIME support, you need dev-libs/libksba-0.9.13, while the highest version
currently in Portage is 0.9.12.

Furthermore, kde-base/certmanager doesn't depend on app-crypt/gpgme at all,
much less a GPGME built with USE="smime".

Summary of how to make Kleopatra work:

1. Copy dev-libs/libksba-0.9.12 to dev-libs/libksba-0.9.13 (no changes needed
except for the version number).
2. Install dev-libs/libksba-0.9.13.
3. Add app-crypt/gnupg-1.9.20 to package.unmask.
4. Install app-crypt/gnupg-1.9.20.
5. Edit the ebuild for app-crypt/gpgme-1.1.0 so it accepts USE="smime".
6. Install app-crypt/gpgme-1.1.0 with USE="smime".
7. Add app-crypt/gpgme to the DEPEND of kde-base/certmanager.

This has been tested on an AMD64 running KDE 3.4.3 and an x86 running KDE
3.5.0.

Portage 2.1_pre3-r1 (default-linux/amd64/2005.0, gcc-3.4.5, glibc-2.3.5-r3,
2.6.15-gentoo x86_64)
=================================================================
System uname: 2.6.15-gentoo x86_64 AMD Athlon(tm) 64 Processor 3200+
Gentoo Base System version 1.12.0_pre13
ccache version 2.4 [enabled]
dev-lang/python:     2.3.5-r2, 2.4.2
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.59-r7
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1
sys-devel/binutils:  2.16.1-r1
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.11-r3
ACCEPT_KEYWORDS="amd64 ~amd64"
AUTOCLEAN="yes"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=athlon64 -O2 -pipe -fweb -frename-registers -fomit-frame-pointer
-momit-leaf-frame-pointer -funit-at-a-time -ftracer"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.4/env
/usr/kde/3.4/share/config /usr/kde/3.4/shutdown /usr/kde/3/share/config
/usr/lib/X11/xkb /usr/share/config /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/texmf/web2c /etc/env.d"
CXXFLAGS="-march=athlon64 -O2 -pipe -fweb -frename-registers
-fomit-frame-pointer -momit-leaf-frame-pointer -funit-at-a-time -ftracer"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig ccache distlocks sandbox sfperms strict userpriv
usersandbox"
GENTOO_MIRRORS="http://mirror.gentoo.se/ http://ftp.du.se/pub/os/gentoo
http://gentoo.oregonstate.edu
http://www.ibiblio.org/pub/Linux/distributions/gentoo"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="amd64 X Xaw3d a52 aac aalib adns alsa audiofile avi bash-completion berkdb
bitmap-fonts bzip2 canna cdinstall cdparanoia cdr cjk crypt cscope curl dts dvd
eds emacs emacs-w3 emboss encode ethereal exif expat fam ffmpeg flac foomaticdb
freetype gcl gd gdbm gif glut gmp gnome gstreamer gtk gtk2 gtkhtml howl idn
imagemagick imap imlib jpeg kde lcms libcaca libwww lzw lzw-tiff mad maildir
matroska mbox mikmod mng mp3 mpeg ncurses nls nocd nptl nptlonly nvidia
offensive ogg oggvorbis openal opengl operanom2 pam pcre pdflib perl pie png
python qt quicktime readline ruby samba sasl sdl sendfile slang spell sqlite
ssl stencil-buffer tcpd tetex tiff truetype truetype-fonts type1-fonts udev
unicode usb userlocales utf8 vorbis xface xine xml2 xpm xv xvid xvmc zlib
elibc_glibc kernel_linux userland_GNU"
Unset:  ASFLAGS, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS

Portage 2.1_pre3-r1 (hardened/x86/2.6, gcc-3.4.5, glibc-2.3.6-r2,
2.6.14-hardened i686)
=================================================================
System uname: 2.6.14-hardened i686 Pentium III (Coppermine)
Gentoo Base System version 1.12.0_pre15
ccache version 2.4 [enabled]
dev-lang/python:     2.3.5, 2.4.2
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.59-r7
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1
sys-devel/binutils:  2.16.1-r1
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.11-r3
ACCEPT_KEYWORDS="x86 ~x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-march=pentium3 -ggdb3 -O2 -pipe -fomit-frame-pointer
-momit-leaf-frame-pointer -mmmx -msse -mfpmath=sse -frename-registers -ftracer
-fweb -funit-at-a-time"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.5/env
/usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/kde/3/share/config
/usr/lib/X11/xkb /usr/share/config /var/qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/texmf/web2c /etc/env.d"
CXXFLAGS="-march=pentium3 -ggdb3 -O2 -pipe -fomit-frame-pointer
-momit-leaf-frame-pointer -mmmx -msse -mfpmath=sse -frename-registers -ftracer
-fweb -funit-at-a-time"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoconfig buildpkg ccache distlocks fixpackages nostrip sandbox
sfperms strict userpriv usersandbox"
GENTOO_MIRRORS="http://mirror.gentoo.se/ http://distfiles.gentoo.org
http://www.ibiblio.org/pub/Linux/distributions/gentoo"
MAKEOPTS="-j2"
PKGDIR="/usr/portage//packages/x86/"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage/"
PORTDIR_OVERLAY="/usr/local/portage"
SYNC="rsync://rsync.gentoo.se/gentoo-portage"
USE="X a52 aac acpi alsa audiofile bash-completion berkdb bzip2 cairo canna
cdparanoia cjk crypt cscope curl dlloader dts dvd emacs ethereal exif expat fam
flac gdbm gif glut gtk gtk2 hal hardened idn imlib immqt jpeg kde lcms libwww
logrotate mmx mng motif mp3 ncurses nls nptl nsplugin offensive ogg oggvorbis
opengl pam pcre perl pic png python qt quicktime readline real samba sasl sdl
spell sqlite sse ssl tcpd tetex tga tiff truetype truetype-fonts udev unicode
usb userlocales vorbis x86 xine xml2 xv xvid xvmc zlib elibc_glibc kernel_linux
userland_GNU"
Unset:  ASFLAGS, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS

Someone in the forums has got that running successfully:
http://forums.gentoo.org/viewtopic-p-3225590.html#3225590

Quoting from the forun thread at least this packages are needed:

>=app-crypt/dirmngr-0.9.3 ~x86 
>=dev-libs/libksba-0.9.13 ~x86 
>=dev-libs/libassuan-0.6.9 ~x86 
>=app-crypt/gpgme-1.1.2 ~x86 
>=app-crypt/gnupg-1.9.0 ~x86

Hope this is marked stable soon, as it is a bad experience to use unstable
software to get email encryption working.

BTW the ebuild kde-base/kcertmanager doesn't exist anymore. Seems like it got
merged into something else (kmail?).

Can you please keyword/stabilize the latest versions of the necessarry
packages?

>=app-crypt/dirmngr-0.9.3 ~x86 (already handled in bug 131039)
>=dev-libs/libksba-0.9.13 ~x86 
>=dev-libs/libassuan-0.6.9 ~x86 
>=app-crypt/gpgme-1.1.2 ~x86 
>=app-crypt/gnupg-1.9.0 ~x86

Stefan, this is not how it works. Maintaining herd is the crypto herd. It's
their decision, if they consider the apps stable enough to invite arch herds. I
opened bug 132343 for that.

this is now FIXED, everything that needs to be stable is stable and depend bugs
are solved :)
thanks