Does Kleopatra support rsassa-pss?

Gpg4win help-en
1

Hello,

I created a rsassa-pss based X.509 certificate using the openssl commands from here: Generate openssl pss certificate · GitHub

I cannot import certificates that use rsassa-pss as signature algorithm.
Is it not supported by Kleopatra/Gpg4win?
SASSA-PKCS1-v1_5 the old signature scheme is supported, but what about RSASSA-PSS, the improved version?

Kleopatra Version 3.1.8 (19.12.3)

Edit: gpgsm --version
gpgsm (GnuPG) 2.2.19
libgcrypt 1.8.5
libksba 1.3.5-unknown
Copyright (C) 2019 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <https://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Home: /home/toge/.gnupg
Unterstützte Verfahren:
Cipher: 3DES, AES128, AES192, AES256, SERPENT128, SERPENT192, SERPENT256, SEED, CAMELLIA128, CAMELLIA192, CAMELLIA256
Pubkey: RSA, ECC
Hash: MD5, SHA1, RIPEMD160, SHA256, SHA384, SHA512, SHA224, WHIRLPOOL
2

Hello @togeka,

gpgsm (GnuPG) 2.2.19

Gpg4win uses GnuPG as a backend and the version you are using is 2.2.19 from 2019-12

2.2.21 released 2020-07 has a changelog entry that reads:

gpgsm: Support rsaPSS signature verification. [T4538]

(Reference: ⚓ T4897 Release GnuPG 2.2.21)

So it makes sense to try with a newer version. :slight_smile: