Kleopatra: Signature verification wrongly offers "Save all"
Open, LowPublic

Assigned To
None
Authored By
ebo
Feb 13 2026, 2:10 PM
Subscribers

Description

When verifying an S/MIME signature which is invalid (maybe also other cases with not fully valid signature, I did not test other variants), "Save all" and "Abort" is offered, instead of "OK" to acknowledge the message.

Pressing the Save button or "Return" will result in the creation of an empty file names test.txtBerta.

Here is the signature file for ease of reproducing this (was created with a faked-system-time before the creation date of the certificate). The certificate is from the standard test set.

Details

Version
vsd 3.3.4/gpd 5.0.1

Event Timeline

ebo created this task.

With a signature which can not be verified because the certificate (selfsigned + it's own root) is not available, the behavior is exactly the same.