Okular: Wrong fingerprint is shown for OpenPGP certificates
Closed, ResolvedPublic

Assigned To
Authored By
ebo
Fri, Jun 12, 1:40 PM

Description

This was reported by radz for a (not-hardened) Okular 26.04 version but it's of course the same for our own builds.

In a PDF signed with an OpenPGP certificate go to the signature tab, right-click -> Properties, then "View Certificate". The fingerprints shown there are not the correct fingerprints of the certificate, instead they are the sha-sums of the file you can export with the button below:

Details

Version
4win 5.0.2

Event Timeline

ebo created this object with edit policy "Contributor (Project)".
ebo mentioned this in Unknown Object (Maniphest Task).Mon, Jun 15, 10:24 AM
svuorela mentioned this in Unknown Object (Maniphest Task).Mon, Jun 22, 6:12 AM
ebo triaged this task as Normal priority.Wed, Jun 24, 10:54 AM
ebo changed the task status from Open to Testing.Wed, Jun 24, 4:05 PM

was merged in okular on 2026-06-21

timegrid claimed this task.
timegrid added a subscriber: timegrid.

Looks good to me on gpg4win-5.1.0-beta653 @ win11:

timegrid edited projects, added gpd5x (gpd-5.1.0); removed gpd5x.