Hi,
I renewed yesterday my certs with Actalis for S/Mime. Two works fine but third one imports ok in Windows cert store, ok in XCA (openssl) but fails importing to Kleopatra. I says “invalid object”. Triing to do with gpgsm sys:
Hi Josep,
thanks for report and it is good that it works for you now.
It would be cool to have an example so that we can reproduce
the import problems, CMS can be a lot so it is hard to say what the problem was.
What you could try is to see if you use a different passphrase as transport protection, maybe all ascii. Would one additional -v , so -vv give more infos about what is going on?
Hi Bernhard,
The cert used was a copy of the received from provider. The pass phrase used to import were all in ASCII. And with --v it says exactly the same.
The enigma was that I received 2 more certs from the same provider that worked fine!
The only thing is some extended property different, but I don’t know which one. It refers only to the private part of the .pfx file.
Sorry but I can’t send you this cert because I tried to obtain another cert revoking this one but I couldn’t.
How can I help you more? Any option to debug more in depth?
you could try to dump the asn structure or use --debug-all to gpgsm to see if there is more interesting stuff (however be careful, --debug-all may contain sensitive information, so do not post it in full.)