Kleopatra: Misleading success message when signing archive
Testing, NormalPublic

Assigned To
Authored By
• ikloecker
Jul 14 2026, 5:31 PM

Description

When I OpenPGP-signed two files (as archive) I first got the "Unusual Signature Warning" message. After pressing Continue and entering the passphrase I got the success message

Successfully signed ‘/home/ingo/dev/g10/testdata/encrypt-me.txt’ and ‘/home/ingo/dev/g10/testdata/encrypt-me-too.txt’ and saved the signature in ‘archive.tar.sig’.

I think this is misleading because "saved the signature in [...]" might be understood as detached signature (despite the warning explicitly mentioning that the result is not a detached signature).

Event Timeline

timegrid triaged this task as Normal priority.Jul 15 2026, 8:29 AM
timegrid changed the edit policy from "All Users" to "Contributor (Project)".
timegrid added a project: Bug Report.

The above text is now only used if a detached signature is created (which is only done for single files). Otherwise, the success message follows the pattern used for encryption (with or without signing), e.g.

Successfully signed ‘/home/ingo/dev/g10/testdata/encrypt-me.txt’ and ‘/home/ingo/dev/g10/testdata/encrypt-me-too.txt’ and saved them as ‘archive.tar.sig’.

• ikloecker changed the task status from Open to Testing.Mon, Aug 10, 12:09 PM
• ikloecker moved this task from Backlog to WIP on the gpd5x board.

backport not possible, as the texts in the VSD branch are completely different.

• ikloecker mentioned this in Unknown Object (Maniphest Task).Mon, Aug 17, 9:39 AM