GNOME Bugzilla – Bug 680451
Add Certificate support into Contact editor
Last modified: 2015-08-27 15:49:37 UTC
In ~/.cache/evolution/addressbook/ews*;gal=1/attachments there are a bunch of DER certificates, including one which I recognise as my own. These will be the S/MIME certificates that I need to use in order to send encrypted email to anyone in the GAL. However, although they're present in the cache they don't actually seem to be visible from Evolution in any way.
This might be better filled in the Evolution, to add a Certificates tab/section into the Contact Editor. I think there was filled such bug already, but I cannot find it.
Yeah. There are a few parts to this. I already fixed up the EWS side to actually extract the cert and put it in the appropriate vcard field, long ago. We have Watson's excellent work on evolution-pkcs11 from last year's GSoC project which makes the keys available when we're actually trying to send encrypted email to someone. The only thing that's actually gated on is some fixes in NSS itself, which currently craps itself when there are lots of certificates available. And once I enabled evolution-pkcs11 for my corporate GAL, there are *lots* :) Saving the contact as a vcard from the GAL already does seem to work, and include the keys where appropriate. So I agree with you that the main thing that's missing now is *displaying* the cert in the Evolution UI (and for non-readonly storage also allowing it to be added/edited/removed).
I also added E_CONTACT_PGP_CERT into eds, then added a new Certificate tab into the Contact editor which can add both types. The X.509 can be shown in the UI, the PGP not. It's not used anywhere else, only in the editor, right now. Created commit_e30450d in eds master (3.17.4+) [1] Created commit 0442acb in evo master (3.17.4+) https://git.gnome.org/browse/evolution-data-server/commit/?id=e30450d
*** Bug 273645 has been marked as a duplicate of this bug. ***
*** Bug 239095 has been marked as a duplicate of this bug. ***