# The &kgpgcertmanager; Handbook

Steffen Hansen

    steffen@klaralvdalens-datakonsult.se

Kalle Dalheimer Developer
Jesper Pedersen

    blackie@kde.org

Developer
&FDLNotice;
2002-08-22
0.00.00

&kgpgcertmanager; is a tool for managing X509 certificates.

KDE Kapp X509 LDAP gpg gpgsm

## Introduction

&kgpgcertmanager; is a tool for managing X509 certificates in the gpgsm keybox and for retrieving certificates from LDAP servers.

## Functions

### Searching

When &kgpgcertmanager; starts, it is ready to search for certificates in the local keybox. Just type in part of the name of a certificate owner, press the find-button and the results will display.

When double-clicking on the results, a dialog with information about the certificate will be displayed.

The combobox in the toolbar can be switched from "in local certificated" to "in external certificates" to search the LDAP servers for certificates. When the results are displayed, each certificate can be double-clicked to show an informational dialog. This dialog has a button "Import to Local" that allows the certificate to imported into the local keybox.

### File/Quit

The menuitem File Quit exits the application.

### View/Redisplay

The menuitem View Redisplay performs the current query again and displays the retults.

### Certificates/New Certificate

The menuitem Certificates New Certificate starts the certificate request creating wizard. It will giude you through a number of steps to create a certificate request. This request can, at the end of the wizard, either be sent to a certificate authority (CA) to be signed or saved to a file (for example a floppy, so it can be shipped to the CA).

Whenever you are done with a step in the wizard, press Next to go to the next step (or Back to review steps that are already completed). The certificate request creation can be cancelled at any point by pressing the Cancel button.

The first step in the wizard is to type in your personal data for the certificate. The fields to fill out are:

- Name: Your name :)

- Location:The town or city you live in.

- Organisation:The organisation you represent (for example the company you work for)

- Department:The organisational unit you're in. For example "Logistics".

- Country code:The two letter code for the country you're living in. For example "US".

- Email address:Your email address. Be sure to get that one right -- this will be the address people will be sending mail to when they use your certificate.

The next step in the wizard is to select whether to store the certificate in a file or send it directly to a CA. You'll have to specify the filename or email address to send the certificate request to.

### Import/Certificate

The Import Certificate... menuitem allows you to import a certificate from a file into the local keybox

The format of the certificate file should be one understood be the gpg-backend. Please refer to the gpg and gpgsm manuals for specifics about this.

### Import/CRL

Normally, Certificate Revocation Lists (CRLs) are handled transparently by the backend, but it might sometimes by useful to import a CRL manually into the local CRL cache.

This can be done from the Import CRL... menuitem.

NOTE: For CRL import to work, the "dirmngr" tool must be in the search PATH. If the From File... menuitem is disabled, you should contact the system administrator and ask him/her to install dirmngr.

You can view the contents of the local CRL cache from the menuitem View CRL cache.... This will display a dialog with information about the CRLs in the cache and the fingerprints of the certificates in each CRL.

### Help

The Help menu contains the standard &kde; help menu.

&help.menu.documentation;

## Credits and License

&kgpgcertmanager; copyright 2002 Steffen Hansen, Kalle Dalheimer and Jesper Pedersen.

Documentation copyright 2002 Steffen Hansen

Contributors

- Steffen Hansen hansen@kde.org

- Kalle Dalheimer kalle@kde.org

- Jesper Pedersen blackie@kde.org

&underGPL; &underFDL;
&documentation.index;