[Pkg-rust-maintainers] Bug#1148000: Thunderbird 153 fails to initialize OpenPGP with Sequoia Octopus

[Norbert]

Hello,

I can confirm an OpenPGP regression after upgrading Thunderbird from 140 
to 153 on Debian testing (forky).

Installed versions:
- thunderbird: 1:153.4.0esr-1
- libsequoia-octopus-librnp: 1.11.1-10
- librnp0: 0.18.1-2+b1

With libsequoia-octopus-librnp installed, Thunderbird's Troubleshooting 
Information page reports:

     RNP (OpenPGP):
     Status: Failed to load. OpenPGP will not work.
     Expected minimum version: 0.18.1
     Version in use: -
     Path: -

The OpenPGP Key Manager is completely empty, including my own private 
key. Under Account Settings -> End-To-End Encryption, Thunderbird still 
remembers the configured key ID but displays:

     This key could not be found! If you want to use it
     you must import it to Thunderbird.

Both pubring.gpg and secring.gpg are still present in my Thunderbird 
profile.

The installed librnp.so symlink points to:

     /usr/lib/thunderbird/librnp.so
       -> ../sequoia/libsequoia_octopus_librnp.so

As a test, I removed libsequoia-octopus-librnp.
After doing so, Thunderbird successfully loads the standard RNP library, 
reporting:

     Status: Unofficial version. OpenPGP might not
             work as expected.
     Expected minimum version: 0.18.1
     Version in use: 0.18.1-2+b1
     Path: librnp.so.0

However, removing libsequoia-octopus-librnp is not a satisfactory 
workaround for users who rely on its integration with GnuPG.
Sequoia Octopus makes keys managed by GnuPG available to Thunderbird, 
including private keys accessed through gpg-agent. Removing it therefore 
breaks the existing GnuPG-based OpenPGP workflow.

The test indicates that the initialisation failure is specific to the 
Sequoia Octopus replacement library. A fix is needed that restores 
compatibility with Thunderbird 153 while preserving the GnuPG 
integration provided by Sequoia Octopus.

Best regards

   Norbert

P.S. I would normally OpenPGP-sign messages to Debian mailing lists and 
the BTS, but unfortunately this regression currently prevents me from 
doing so.