[pkg-gnupg-maint] Bug#791364: No gpg-agent is started unless 'use-agent' is explicitly configured

Michael Biebl biebl at debian.org
Fri Jul 3 20:43:34 UTC 2015


Package: gnupg-agent
Version: 2.0.28-2
Severity: importatn

This is a followup for the changes I made in gnome-keyring to use
pinentry-gnome3 and gpg-agent [1]

We have important regressions with the new setup:
A default ~/.gnupg/gpg.conf does not set "use-agent".
As a result, /etc/X11/Xsession.d/90gpg-agent won't start a gpg-agent on
session login.

a/ without a running gpg-agent, gpg v2 doesn't cache any passwords. It
spawns a gpg-agent process on demand, so we at least get a
pinentry-gnome3 based prompt.

b/ without "use-agent", gpg v1 will also not use gpg-agent/pinentry-gnome3
at all, but fall back to prompt directly on the console.

Regarding gpg v2 I'm surprised that "use-agent" is still necessary.
At least "man gpg2" says that --use-agent is a dummy, since gnupg agent
is mandatory

Any clever idea how we can address this? Should we start gpg-agent
unconditionally in /etc/X11/Xsession.d/90gpg-agent? This would at least
address a/.

Regards,
Michael

[1] https://bugs.debian.org/760102

-- System Information:
Debian Release: stretch/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'stable'), (200, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.0.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages gnupg-agent depends on:
ii  libassuan0                  2.2.1-1
ii  libc6                       2.19-18
ii  libgcrypt20                 1.6.3-2
ii  libgpg-error0               1.19-2
ii  libpth20                    2.0.7-20
ii  libreadline6                6.3-8+b3
ii  pinentry-curses [pinentry]  0.9.4-2
ii  pinentry-gnome3 [pinentry]  0.9.4-2

Versions of packages gnupg-agent recommends:
ii  gnupg   1.4.19-3
ii  gnupg2  2.0.28-2

gnupg-agent suggests no packages.

-- no debconf information



More information about the pkg-gnupg-maint mailing list