S/MIME (p12) Certificate Import - Invalid Object

rbc · 2025-09-09 03:47

I was trying to import a p12 file using the Crypto icon under the control panel. It appears that the p12 file decrypted okay because I was prompted to add a protection password. After I entered the protection password, the import threw a "Invalid Object" error popup. Kleopatra also launches, but seems to hang with a partial status bar in the lower right hand corner, and no certificates being shown.

I did manage to import my GPG key pair using Kgpg, but I don't see that in Kleopatra either. Any suggestions of how to crank up the debugging for Kleopatra so I can see some kind of error trace?

Something else I noticed was that copy and paste (C-c & C-v) didn't work between KeepassXC and the Trinity apps. I had to use the middle mouse button to paste the marked passwords from KeepassXC into the key management password prompts.

This is with the 64 bit version of Acquarius, using the Trinity PIM package.

On a brighter note, I was able to import my calendar, feeds, and address book via the Kontact wrapper application. No problems there.

q4osteam · 2025-09-09 10:30

How did you install "Kleopatra" and how do you launch it ?

rbc · 2025-09-09 12:13

root@q4os-desktop:~# apt-cache rdepends --installed kleopatra-trinity
kleopatra-trinity
Reverse Depends:
kleopatra-trinity
tdepim-trinity
kmail-trinity
kleopatra-trinity

I didn't explicetly install Kleopatra, but I believe tdepim-trinity installed it.

I used the the Crypto icon under the control panel. I also launched Kleopatra via Kmail, under Kontact using the "Tools -> Certificate Manager" menu. That didn't work either...

rbc · 2025-09-10 13:14

To add a little more detail, I initiated the import from the TDE Control Module "You Certificates" tab. It would request the password to decrypt the p12 file. It would then offer to share the key with KMail. The step that fails, is setting the protection password for the S/MIME certificate pair. This is where Kleopatra is called and the "Invalid Object" dialog is thrown.

I also tried to import the p12 file via Kleopatra directly via the "File -> Import Certificates" menu selection. That dialog fails after entering the p12 password, never asking for a protection password.

Judging from the user interface, it appears that something about Kleopatra is not working.

q4osteam · 2025-09-10 13:31

Yes, it seems to be Kleopatra-trinity flaw, we will try to investigate more. We can also recommend you to report to the upstream devs https://www.trinitydesktop.org/

rbc · 2025-09-10 14:07

I just created my TDE Gitea Workspace account to report another issue. I'll file it sometime today or tomorrow.

q4osteam · 2025-09-10 14:41

rbc wrote:

I just created my TDE Gitea Workspace account to report another issue. I'll file it sometime today or tomorrow.

+1

rbc · 2025-09-11 03:10

Added: https://mirror.git.trinitydesktop.org/g … issues/169

rbc · 2025-09-14 00:15

For what it's worth. The import works on Q4OS Andromeda. At least when launching Kleopatra from KMail.

Q4OS Forum

#1 2025-09-09 03:47

S/MIME (p12) Certificate Import - Invalid Object

#2 2025-09-09 10:30

Re: S/MIME (p12) Certificate Import - Invalid Object

#3 2025-09-09 12:13

Re: S/MIME (p12) Certificate Import - Invalid Object

#4 2025-09-10 13:14

Re: S/MIME (p12) Certificate Import - Invalid Object

#5 2025-09-10 13:31

Re: S/MIME (p12) Certificate Import - Invalid Object

#6 2025-09-10 14:07

Re: S/MIME (p12) Certificate Import - Invalid Object

#7 2025-09-10 14:41

Re: S/MIME (p12) Certificate Import - Invalid Object

#8 2025-09-11 03:10

Re: S/MIME (p12) Certificate Import - Invalid Object

#9 2025-09-14 00:15

Re: S/MIME (p12) Certificate Import - Invalid Object

Board footer