KMail's certificate manager, kde-base/kcertmanager (a.k.a. Kleopatra), doesn't work without S/MIME support. When you try to start Kleopatra in KDE 3.4.3, you get a dialog box saying "The crypto plugin could not be initialized. Certificate Manager will terminate now.", and Kleopatra exits immediately. In KDE 3.5.0, a dialog box says "An error occurred while fetching the certificates from the backend: Unsupported protocol", and the Kleopatra window appears but is nonfunctional. The only place Kleopatra seems to be looking for S/MIME support is in GPGME (app-crypt/gpgme), which doesn't have it. To build GPGME with S/MIME support, you must install (the hard-masked) GnuPG >= 1.9 (app-crypt/gpgme) with S/MIME support and change the GPGME ebuild to accept the "smime" USE flag (which is currently present but commented out). Additionally, to build GnuPG 1.9.20 with S/MIME support, you need dev-libs/libksba-0.9.13, while the highest version currently in Portage is 0.9.12. Furthermore, kde-base/certmanager doesn't depend on app-crypt/gpgme at all, much less a GPGME built with USE="smime". Summary of how to make Kleopatra work: 1. Copy dev-libs/libksba-0.9.12 to dev-libs/libksba-0.9.13 (no changes needed except for the version number). 2. Install dev-libs/libksba-0.9.13. 3. Add app-crypt/gnupg-1.9.20 to package.unmask. 4. Install app-crypt/gnupg-1.9.20. 5. Edit the ebuild for app-crypt/gpgme-1.1.0 so it accepts USE="smime". 6. Install app-crypt/gpgme-1.1.0 with USE="smime". 7. Add app-crypt/gpgme to the DEPEND of kde-base/certmanager. This has been tested on an AMD64 running KDE 3.4.3 and an x86 running KDE 3.5.0. Portage 2.1_pre3-r1 (default-linux/amd64/2005.0, gcc-3.4.5, glibc-2.3.5-r3, 2.6.15-gentoo x86_64) ================================================================= System uname: 2.6.15-gentoo x86_64 AMD Athlon(tm) 64 Processor 3200+ Gentoo Base System version 1.12.0_pre13 ccache version 2.4 [enabled] dev-lang/python: 2.3.5-r2, 2.4.2 sys-apps/sandbox: 1.2.17 sys-devel/autoconf: 2.13, 2.59-r7 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1 sys-devel/binutils: 2.16.1-r1 sys-devel/libtool: 1.5.22 virtual/os-headers: 2.6.11-r3 ACCEPT_KEYWORDS="amd64 ~amd64" AUTOCLEAN="yes" CBUILD="x86_64-pc-linux-gnu" CFLAGS="-march=athlon64 -O2 -pipe -fweb -frename-registers -fomit-frame-pointer -momit-leaf-frame-pointer -funit-at-a-time -ftracer" CHOST="x86_64-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.4/env /usr/kde/3.4/share/config /usr/kde/3.4/shutdown /usr/kde/3/share/config /usr/lib/X11/xkb /usr/share/config /var/qmail/control" CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/texmf/web2c /etc/env.d" CXXFLAGS="-march=athlon64 -O2 -pipe -fweb -frename-registers -fomit-frame-pointer -momit-leaf-frame-pointer -funit-at-a-time -ftracer" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig ccache distlocks sandbox sfperms strict userpriv usersandbox" GENTOO_MIRRORS="http://mirror.gentoo.se/ http://ftp.du.se/pub/os/gentoo http://gentoo.oregonstate.edu http://www.ibiblio.org/pub/Linux/distributions/gentoo" MAKEOPTS="-j2" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage" USE="amd64 X Xaw3d a52 aac aalib adns alsa audiofile avi bash-completion berkdb bitmap-fonts bzip2 canna cdinstall cdparanoia cdr cjk crypt cscope curl dts dvd eds emacs emacs-w3 emboss encode ethereal exif expat fam ffmpeg flac foomaticdb freetype gcl gd gdbm gif glut gmp gnome gstreamer gtk gtk2 gtkhtml howl idn imagemagick imap imlib jpeg kde lcms libcaca libwww lzw lzw-tiff mad maildir matroska mbox mikmod mng mp3 mpeg ncurses nls nocd nptl nptlonly nvidia offensive ogg oggvorbis openal opengl operanom2 pam pcre pdflib perl pie png python qt quicktime readline ruby samba sasl sdl sendfile slang spell sqlite ssl stencil-buffer tcpd tetex tiff truetype truetype-fonts type1-fonts udev unicode usb userlocales utf8 vorbis xface xine xml2 xpm xv xvid xvmc zlib elibc_glibc kernel_linux userland_GNU" Unset: ASFLAGS, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS Portage 2.1_pre3-r1 (hardened/x86/2.6, gcc-3.4.5, glibc-2.3.6-r2, 2.6.14-hardened i686) ================================================================= System uname: 2.6.14-hardened i686 Pentium III (Coppermine) Gentoo Base System version 1.12.0_pre15 ccache version 2.4 [enabled] dev-lang/python: 2.3.5, 2.4.2 sys-apps/sandbox: 1.2.17 sys-devel/autoconf: 2.13, 2.59-r7 sys-devel/automake: 1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r1 sys-devel/binutils: 2.16.1-r1 sys-devel/libtool: 1.5.22 virtual/os-headers: 2.6.11-r3 ACCEPT_KEYWORDS="x86 ~x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-march=pentium3 -ggdb3 -O2 -pipe -fomit-frame-pointer -momit-leaf-frame-pointer -mmmx -msse -mfpmath=sse -frename-registers -ftracer -fweb -funit-at-a-time" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/kde/3/share/config /usr/lib/X11/xkb /usr/share/config /var/qmail/control" CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/texmf/web2c /etc/env.d" CXXFLAGS="-march=pentium3 -ggdb3 -O2 -pipe -fomit-frame-pointer -momit-leaf-frame-pointer -mmmx -msse -mfpmath=sse -frename-registers -ftracer -fweb -funit-at-a-time" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig buildpkg ccache distlocks fixpackages nostrip sandbox sfperms strict userpriv usersandbox" GENTOO_MIRRORS="http://mirror.gentoo.se/ http://distfiles.gentoo.org http://www.ibiblio.org/pub/Linux/distributions/gentoo" MAKEOPTS="-j2" PKGDIR="/usr/portage//packages/x86/" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage/" PORTDIR_OVERLAY="/usr/local/portage" SYNC="rsync://rsync.gentoo.se/gentoo-portage" USE="X a52 aac acpi alsa audiofile bash-completion berkdb bzip2 cairo canna cdparanoia cjk crypt cscope curl dlloader dts dvd emacs ethereal exif expat fam flac gdbm gif glut gtk gtk2 hal hardened idn imlib immqt jpeg kde lcms libwww logrotate mmx mng motif mp3 ncurses nls nptl nsplugin offensive ogg oggvorbis opengl pam pcre perl pic png python qt quicktime readline real samba sasl sdl spell sqlite sse ssl tcpd tetex tga tiff truetype truetype-fonts udev unicode usb userlocales vorbis x86 xine xml2 xv xvid xvmc zlib elibc_glibc kernel_linux userland_GNU" Unset: ASFLAGS, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS
Someone in the forums has got that running successfully: http://forums.gentoo.org/viewtopic-p-3225590.html#3225590
Quoting from the forun thread at least this packages are needed: >=app-crypt/dirmngr-0.9.3 ~x86 >=dev-libs/libksba-0.9.13 ~x86 >=dev-libs/libassuan-0.6.9 ~x86 >=app-crypt/gpgme-1.1.2 ~x86 >=app-crypt/gnupg-1.9.0 ~x86 Hope this is marked stable soon, as it is a bad experience to use unstable software to get email encryption working. BTW the ebuild kde-base/kcertmanager doesn't exist anymore. Seems like it got merged into something else (kmail?).
Can you please keyword/stabilize the latest versions of the necessarry packages? >=app-crypt/dirmngr-0.9.3 ~x86 (already handled in bug 131039) >=dev-libs/libksba-0.9.13 ~x86 >=dev-libs/libassuan-0.6.9 ~x86 >=app-crypt/gpgme-1.1.2 ~x86 >=app-crypt/gnupg-1.9.0 ~x86
Stefan, this is not how it works. Maintaining herd is the crypto herd. It's their decision, if they consider the apps stable enough to invite arch herds. I opened bug 132343 for that.
this is now FIXED, everything that needs to be stable is stable and depend bugs are solved :) thanks
