Bug#1110841: secrets: 'Failed to unlock Safe' with empty password field

[Martin Cihlar]

Package: secrets
Version: 11.0-2
Severity: important
X-Debbugs-Cc: martin.cibule at seznam.cz

Dear Maintainer,

GNOME Secrets can no longer open my KeePass databases (KDBX) that are protected
by a keyfile but have no password set. The error shown in the UI is simply
'Failed to unlock Safe'. This occurred after the upgrade to trixie, the version
in bookworm (7.2-1) did not exhibit this behaviour.

I am not able to reproduce this issue in upstream version 11.1.1 (latest as of
writing), Flatpak.

Nothing interesting in stdout when run with the --debug option:
$ secrets --debug

(secrets:31608): Gtk-WARNING **: 12:45:47.650: Unknown key gtk-modules in
/home/martin/.config/gtk-4.0/settings.ini
11-08-25 12:45:57 | DEBUG | File selected: /redacted/path/to/kdbx
11-08-25 12:46:05 | DEBUG | Keyfile selected: /redacted/path/to/keyfile
11-08-25 12:46:07 | DEBUG | Generate key for FileProvider
11-08-25 12:46:07 | DEBUG | Adding key from FileProvider
11-08-25 12:46:07 | DEBUG | Generate key for Pkcs11Provider
11-08-25 12:46:07 | DEBUG | Generate key for YubiKeyProvider


-- System Information:
Debian Release: 13.0
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.12.38+deb13-amd64 (SMP w/4 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages secrets depends on:
ii  dconf-gsettings-backend [gsettings-backend]  0.40.0-5
ii  gir1.2-adw-1                                 1.7.4-2
ii  gir1.2-gtk-4.0                               4.18.6+ds-2
ii  gir1.2-gtksource-5                           5.16.0-1
ii  python3                                      3.13.5-1
ii  python3-gi                                   3.50.0-4+b1
ii  python3-pykcs11                              1.5.17-1+b2
ii  python3-pykeepass                            4.1.1.post1-1
ii  python3-pyotp                                2.9.0-2
ii  python3-python-zxcvbn-rs-py                  0.2.0-1+b1
ii  python3-validators                           0.20.0-2
ii  python3-yubico                               1.3.3-3

secrets recommends no packages.

secrets suggests no packages.

-- no debconf information