[Pkg-mozext-maintainers] Bug#794627: Info received ( Bug#794627: enigmail does not work with gpg 2.1.6)

Daniel Kahn Gillmor dkg at fifthhorseman.net
Wed Aug 19 10:43:27 UTC 2015


Hi Emmanuel--

On Wed 2015-08-19 11:11:36 +0200, Emmanuel Fleury wrote:
>> egrep -i 'enigmail|pgp' ~/.icedove/*/prefs.js
>
> Here is my configuration of Iceweasel (it's not far from the vanilla one):

thanks for this:

> user_pref("extensions.enigmail.advancedUser", true);
> user_pref("extensions.enigmail.configuredVersion", "1.8.2pre3");
> user_pref("extensions.enigmail.keyserver", "pgp.mit.edu,
> pool.sks-keyservers.net, keys.gnupg.net");
> user_pref("mail.identity.id1.attachPgpKey", false);
> user_pref("mail.identity.id1.enablePgp", true);
> user_pref("mail.identity.id1.openPgpHeaderMode", 0);
> user_pref("mail.identity.id1.pgpKeyMode", 0);
> user_pref("mail.identity.id1.pgpMimeMode", true);
> user_pref("mail.identity.id1.pgpSignEncrypted", false);
> user_pref("mail.identity.id1.pgpSignPlain", true);
> user_pref("mail.identity.id2.attachPgpKey", false);
> user_pref("mail.identity.id2.enablePgp", true);
> user_pref("mail.identity.id2.openPgpHeaderMode", 0);
> user_pref("mail.identity.id2.pgpKeyMode", 0);
> user_pref("mail.identity.id2.pgpMimeMode", true);
> user_pref("mail.identity.id2.pgpSignEncrypted", false);
> user_pref("mail.identity.id2.pgpSignPlain", true);

 [...]

I don't see anything particularly wrong with your configurations here.
As you say, it's quite close to the vanilla one.

However, i've done a bit more testing, and i have some more diagnostic
questions to ask:

 a) what version(s) of pinentry do you have installed?  what do you use
    by default?

dpkg -l 'pinentry*'
dpkg -S $(readlink -f $(which pinentry))
grep pinentry-program ~/.gnupg/*.conf

 b) what what desktop environment are you using (GNOME, KDE, etc)?

 c) while icedove+enigmail is open and failing with gnupg2 and
    gnupg-agent 2.1.7 installed, can you open another terminal in the
    same session and take the following steps to restart the gpg-agent:

gpg-connect-agent killagent /bye
gpg-connect-agent /bye

    Then go back to enigmail to try to do some secret-key operation
    (decrypting a message, sending a signed message)

If it turns out that you're using pinentry-gnome3 on a gnome desktop
environment, and the steps in (c) resolve things for you, then i suspect
there's an issue with the environment variables passed by enigmail to
gpg (and from there to gpg-agent).

Can you let me know whether the above steps work for you?  This might be
something to fix in enigmail.

          --dkg



More information about the Pkg-mozext-maintainers mailing list