I had the same problem with my self-sgined certificate. Fix for me was: *) activate allow-trust as above: configure kleopatra to trust you as a signing autority Settings > Configure Cleopatra > GnuPG System > GPG Agent > [x] Allow clients to mark keys as "trusted" restart On restart you will be asked which keys you want to trust. Trust your self, maybe trust others (this will create a file ~/.gnupg/trustlist.txt storing your choices, you can adjust them there later, if you want.)
*) problem specific to self-sgined certificates (I guess): tell dirmngr to stop looking for a CRL for you vim ~/.gnupg/trustlist.txt append 'relax' at the end of the line containing the fingerprint for your key (see man-page for gpgsm, option '--disable-trusted-cert-crl-check') restart gpg-agent gpgconf --reload gpg-agent (no sudo), or restart the system After this selecting keys in kmail works as expected. PS: To get some clue about what is going on, you can use the GPG Log viewer: start log-viewer in kleopatra (e.g. when kmail fails to select the key you want and shows red crosses without any helpfull feedback) Tools > GnuPG Log Viewer -- You received this bug notification because you are a member of Kubuntu Bugs, which is subscribed to kdepim in Ubuntu. https://bugs.launchpad.net/bugs/584027 Title: Kmail silently rejects S/MIME Certificate To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/kdepim/+bug/584027/+subscriptions -- kubuntu-bugs mailing list kubuntu-b...@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/kubuntu-bugs