[pkg-gnupg-maint] Bug#1053531: gnupg/gpg-agent/pinentry: timeout

Thorsten Glaser tg at mirbsd.de
Thu Oct 5 20:07:07 BST 2023


Package: gpg-agent
Version: 2.2.27-2+deb11u2
Severity: normal
X-Debbugs-Cc: tg at mirbsd.de

Not sure which subpackage exactly is at fault, please reassign accordingly.

I started a “git commit -a -S” and got presented a pinentry-curses
through gpg-agent to enter my PGP key’s password, but then got IRL
distracted by being asked a question, and it had terminated the
pinentry and agent, asking me for a password on stderr/tty without
pinentry, but as soon as I went to type it there, it ended up with:

error: gpg failed to sign the data
fatal: failed to write commit object

Then I had to redo the commit, writing the entire commit message
again because, of course, it wasn’t kept.

IMHO the pinentry form shouldn’t time out (or at least be reasonable
about it, e.g. time out after one hour, at the earliest, or so).


-- System Information:
Debian Release: 11.8
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldstable-security'), (500, 'oldstable-proposed-updates'), (500, 'oldstable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.10.0-24-amd64 (SMP w/2 CPU threads)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=C, LC_CTYPE=C (charmap=UTF-8) (ignored: LC_ALL set to C.UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/lksh
Init: sysvinit (via /sbin/init)

Versions of packages gpg-agent depends on:
ii  gpgconf                     2.2.27-2+deb11u2
ii  init-system-helpers         1.60
ii  libassuan0                  2.5.3-7.1
ii  libc6                       2.31-13+deb11u7
ii  libgcrypt20                 1.8.7-6
ii  libgpg-error0               1.38-2
ii  libnpth0                    1.6-3
ii  pinentry-curses [pinentry]  1.1.0-4

Versions of packages gpg-agent recommends:
ii  gnupg  2.2.27-2+deb11u2

Versions of packages gpg-agent suggests:
pn  dbus-user-session  <none>
pn  libpam-systemd     <none>
pn  pinentry-gnome3    <none>
pn  scdaemon           <none>

-- no debconf information


More information about the pkg-gnupg-maint mailing list