[Pkg-mozext-maintainers] Bug#862145: enigmail: copy of key with old passphrase cached, cannot clear

[Mark Hedges]

Package: enigmail
Version: 2:1.9.6-2
Severity: normal

1.  Create a GPG key with passphrase "foo".

2.  Configure enigmail to use that key for an account.  Give the public key to another account.  Send and receive mail.  Passphrase "foo" works at prompts to encrypt and decrypt.  Quit enigmail.

3.  Change passphrase with `gpg --edit` to passphrase "bar".

4.  Use enigmail to send mail.  Passphrase "bar" accepted.  Use enigmail to read encrypted mail.  Only passphrase "foo" works to decrypt mail.

Tried clearing passphrase and reloading key cache from enigmail key management.

If I remove key3.db, will everything break?

Is this because of an upgrade from icedove?

Mark


Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?
   * What exactly did you do (or not do) that was effective (or
     ineffective)?
   * What was the outcome of this action?
   * What outcome did you expect instead?

*** End of the template - remove these template lines ***


-- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64
 (x86_64)

Kernel: Linux 4.9.0-2-rt-amd64 (SMP w/4 CPU cores; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages enigmail depends on:
ii  gnupg                  2.1.18-6
ii  gnupg-agent            2.1.18-6
ii  icedove                1:45.8.0-3
ii  thunderbird [icedove]  1:45.8.0-3

Versions of packages enigmail recommends:
ii  pinentry-gnome3 [pinentry-x11]  1.0.0-2

enigmail suggests no packages.

-- no debconf information