Kleopatra: Misleading success message when signing archive
Testing, NormalPublic

Assigned To
Authored By
ikloecker
Jul 14 2026, 5:31 PM

Description

When I OpenPGP-signed two files (as archive) I first got the "Unusual Signature Warning" message. After pressing Continue and entering the passphrase I got the success message

Successfully signed ‘/home/ingo/dev/g10/testdata/encrypt-me.txt’ and ‘/home/ingo/dev/g10/testdata/encrypt-me-too.txt’ and saved the signature in ‘archive.tar.sig’.

I think this is misleading because "saved the signature in [...]" might be understood as detached signature (despite the warning explicitly mentioning that the result is not a detached signature).

Event Timeline

timegrid triaged this task as Normal priority.Jul 15 2026, 8:29 AM
timegrid changed the edit policy from "All Users" to "Contributor (Project)".
timegrid added a project: Bug Report.

The above text is now only used if a detached signature is created (which is only done for single files). Otherwise, the success message follows the pattern used for encryption (with or without signing), e.g.

Successfully signed ‘/home/ingo/dev/g10/testdata/encrypt-me.txt’ and ‘/home/ingo/dev/g10/testdata/encrypt-me-too.txt’ and saved them as ‘archive.tar.sig’.

ikloecker changed the task status from Open to Testing.Mon, Aug 10, 12:09 PM
ikloecker moved this task from Backlog to WIP on the gpd5x board.

backport not possible, as the texts in the VSD branch are completely different.

ikloecker mentioned this in Unknown Object (Maniphest Task).Mon, Aug 17, 9:39 AM