This problem was fixed by  modifying /home/jack/gnupg/gpg.conf by
deleting the line gpg-agent-info
/home/jack/.gnome2/seahorse-5HDGLT/S.gpg-agent:12517:1

Now I am prompted for the passphrase when I select an encrypted email. 
The dialog box style is different from the prompt that used to appear in
the same situation under Etch.  The Etch prompt was consistent in style
with Mozilla, while the Lenny prompt style is more consistent with KDE.

In Icedove, there is a menu item at OpenPGP-Preferences-Advanced-use
gpg-agent for passphrases.  It appears that this check box is ignored
under Lenny.  The behaviour of Enigmail under Lenny is exactly the same
whether it was checked or not.

My guess is that under Etch, Enigmail itself handled the prompt for the
passphrase, while the Lenny version always uses gpg-agent (which would
explain the KDE style dialog box).  If that is true, then it did not
matter if gpg-agent was correctly set up under Etch.  Under Lenny, the
problem became evident.

It appears that when seahorse installed under Etch, gpg-agent was set up
to run (under user jack) whenever jack logged in, and a line was placed
in gpg.conf to override the use of the GPG_AGENT_INFO environment
variable.  But its socket was put in a location like /tmp/gpg-djPIsn/
instead of  jack/.gnome2/seahorse-5HDGLT/ as indicated in gpg.conf. So
under Lenny, gpg looks for the agent in the wrong place.

I have not been able to find the configuration file that causes
gpg-agent to run when jack logs in, but I have confirmed that this does
happen, and that it does not happen when other users log in.

Is this a bug in enigmail, or seahorse, or gpg?

From the visual point of view, it is better for the passphrase prompt to
be consistent with the rest of Mozilla and Enigmail, so I suggest that
the "use gpg-agent for passphrases" check box should be fixed.

-- 
=================================================
This email is digitally signed using the Enigmail
and GnuPG packages (http://enigmail.mozdev.org), 
which can also be used by the recipient to verify
the digital signature.
=================================================


Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to