[pkg-gnupg-maint] Bug#850708: Bug#850708: gpg: decryption failed: No secret key

Daniel Kahn Gillmor dkg at fifthhorseman.net
Tue Jan 10 23:26:57 UTC 2017


Control: reassign 850708 pinentry-gtk-2

On Mon 2017-01-09 22:08:09 -0500, Vincent Lefevre wrote:
> On 2017-01-09 18:00:14 -0500, Daniel Kahn Gillmor wrote:
>> what pinentry are you using?
>
> pinentry-gtk-2
>
> No problems with pinentry-curses.

I've reassigned this bug report to pinentry-gtk-2.  can you indicate
what version you're using?

>> how is your pinentry launched or managed?
>
> I don't know. I suppose that's gpg-agent that starts it.
>
>> what happens if you do:
>> 
>>     gpg-connect-agent 'get_passphrase cacheval123 errorrmsg leadprompt description' /bye
>> 
>> this *should* throw up a password prompt in your graphical display.
>
> Most of the time:
>
> zira:~> gpg-connect-agent 'get_passphrase cacheval123 errorrmsg leadprompt description' /bye
> ERR 83886179 Operation cancelled <Pinentry>
>
> Sometimes a pinentry window appears.

is the above quoted text an example of the pinentry window appearing or not?

>> you can clear the same cached passphrase with:
>> 
>>     gpg-connect-agent 'clear_passphrase cacheval123' /bye
>
> If I do that first, I get the same error.

you get the "operation canceled" error?

> Same problem if I use a wrapper:
>
> #!/bin/sh
> exec /usr/bin/pinentry-gtk-2 "$@"
>
> but if I use strace:
>
> #!/bin/sh
> exec strace -f -tt -o /home/vinc17/str.out /usr/bin/pinentry-gtk-2 "$@"
>
> I can't reproduce the problem. :(
>
> If I use
>
> #!/bin/sh
> exec /usr/bin/pinentry-gtk-2 "$@" 2> /tmp/stderr
>
> I get in /tmp/stderr:
>
> ** (pinentry-gtk-2:2711): WARNING **: it took 16 tries to grab the keyboard
>
> ** (pinentry-gtk-2:2711): CRITICAL **: could not grab pointer: already grabbed (1)
>
> Perhaps the problem. Couldn't gpg-agent capture pinentry's standard
> error to give it back to the user in case of error?

gpg-agent will log pinentry feedback if you set "debug pinentry" and
"debug 1024" in ~/.gnupg/gpg-agent.conf

> If I add strace to make it work, then /tmp/stderr is empty.

what window manager are you using?  is there something else going on in
your graphical session that might make pinentry-gtk-2 unable to grab the
keyboard and pointer?  are several of these things happening
concurrently?

        --dkg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 832 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnupg-maint/attachments/20170110/d21b7226/attachment.sig>


More information about the pkg-gnupg-maint mailing list