Processed: Re: Bug#334206: mozilla-enigmail not decrypting messages

2005-10-20 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

> severity 334206 important
Bug#334206: mozilla-enigmail not decrypting messages
Severity set to `important'.

> thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#334206: mozilla-enigmail not decrypting messages

2005-10-20 Thread Alexander Sack
severity 334206 important
thanks

though not nice, definitly not release critical.

-- 
 GPG messages preferred.   |  .''`.  ** Debian GNU/Linux **
 Alexander Sack| : :' :  The  universal
 [EMAIL PROTECTED]   | `. `'  Operating System
 http://www.asoftsite.org  |   `-http://www.debian.org


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#334206: mozilla-enigmail not decrypting messages

2005-10-19 Thread Alexander Sack
On Wed, Oct 19, 2005 at 09:43:53AM +0200, Caspar Bothmer wrote:
> Alexander Sack wrote:
> >true, but only for pgp/mime encrypted messages. If you inline, it
> >should work.
> 
> Ok, this is a viable workaround for you and me, but is it OK for 
> everybody?  I have enough difficulties to have others sign their 
> messages at all...

All looks like this gets a hard-wired in mozilla 1.7.13 or maybe one release
later. So lets live with it for now.

> 
> 
> >>- narrowing view via "Subject or Recipient contains"
> >>- traversal between mboxes
> >I no nothing about those issues, maybe you can explain them?
> 
> These aren't enigmail issues.  Just try these functions, but make sure 
> you don't just switch between mboxes but actually open mails within 
> these mboxes.  Maybe you first have to try to decrypt a pgp/mime mail...
> 

Are there bugs posted for those issues? Please use separate bugs so such
info does not get lost and gets documented in a proper context.

Thanks

-- 
 GPG messages preferred.   |  .''`.  ** Debian GNU/Linux **
 Alexander Sack| : :' :  The  universal
 [EMAIL PROTECTED]   | `. `'  Operating System
 http://www.asoftsite.org  |   `-http://www.debian.org


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#334206: mozilla-enigmail not decrypting messages

2005-10-19 Thread Caspar Bothmer

Alexander Sack wrote:

true, but only for pgp/mime encrypted messages. If you inline, it
should work.


Ok, this is a viable workaround for you and me, but is it OK for 
everybody?  I have enough difficulties to have others sign their 
messages at all...




- narrowing view via "Subject or Recipient contains"
- traversal between mboxes

I no nothing about those issues, maybe you can explain them?


These aren't enigmail issues.  Just try these functions, but make sure 
you don't just switch between mboxes but actually open mails within 
these mboxes.  Maybe you first have to try to decrypt a pgp/mime mail...




 https://bugzilla.mozilla.org/show_bug.cgi?id=303523


Ok, it's a known issue :-//  Thanks for these references.


caspar


signature.asc
Description: OpenPGP digital signature


Bug#334206: mozilla-enigmail not decrypting messages

2005-10-18 Thread Alexander Sack
On Tue, Oct 18, 2005 at 11:54:17PM +0200, Caspar Bothmer wrote:
> Alexander Sack wrote:
> >currently there is no way to fix this. So if you want decryption you
> >have to allow to load remote images :( ... for now.
> 
> This renders mozilla mail useless.  Exactly this single option is 
> responsible for at least three broken functions:
> - enigmail decryption
true, but only for pgp/mime encrypted messages. If you inline, it
should work.

> - narrowing view via "Subject or Recipient contains"
> - traversal between mboxes

I no nothing about those issues, maybe you can explain them?
> 
> Where?  Upstream within mozilla or enigmail?  Or within Debian?

 http://mozdev.org/pipermail/enigmail/2005-August/004809.html

 and look http://mozdev.org/pipermail/enigmail/2005-August/thread.html
 for other messages with that topic (sorry thread appears broken in archive).

and

 https://bugzilla.mozilla.org/show_bug.cgi?id=303523


-- 
 GPG messages preferred.   |  .''`.  ** Debian GNU/Linux **
 Alexander Sack| : :' :  The  universal
 [EMAIL PROTECTED]   | `. `'  Operating System
 http://www.asoftsite.org  |   `-http://www.debian.org


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#334206: mozilla-enigmail not decrypting messages

2005-10-18 Thread Caspar Bothmer

Alexander Sack wrote:

currently there is no way to fix this. So if you want decryption you
have to allow to load remote images :( ... for now.


This renders mozilla mail useless.  Exactly this single option is 
responsible for at least three broken functions:

- enigmail decryption
- narrowing view via "Subject or Recipient contains"
- traversal between mboxes

That's ridiculous.


I know this 
discussion


Where?  Upstream within mozilla or enigmail?  Or within Debian?


and afaik, there was no real compromise to fix mozilla 
security without breaking enigmail or adding special enigmail code 
to the mozilla base.


It looks as if I will find a compromise myself -- and get another mailer...


caspar


signature.asc
Description: OpenPGP digital signature


Bug#334206: mozilla-enigmail not decrypting messages

2005-10-18 Thread Alexander Sack
On Tue, Oct 18, 2005 at 06:13:30PM +0200, Caspar Bothmer wrote:
> 
> In Preferences->Privacy&Security->Images is an option "Do not load
> remote images in Mail & Newsgroup messages".
> 

OK, I know about this issue. Thanks for tracking this down. Anyway,
currently there is no way to fix this. So if you want decryption you
have to allow to load remote images :( ... for now.

> 
> I am not sure if other settings will have a similar effect to the 
> behaviour of enigmail.  This is just the first setting I came across my 
> tests.

No, this is indeed the only issue. You hit the nail. I know this 
discussion and afaik, there was no real compromise to fix mozilla 
security without breaking enigmail or adding special enigmail code 
to the mozilla base.


-- 
 GPG messages preferred.   |  .''`.  ** Debian GNU/Linux **
 Alexander Sack| : :' :  The  universal
 [EMAIL PROTECTED]   | `. `'  Operating System
 http://www.asoftsite.org  |   `-http://www.debian.org


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#334206: mozilla-enigmail not decrypting messages

2005-10-18 Thread Caspar Bothmer

Caspar Bothmer wrote:

I can't reproduce this error with a new account.


I did some tests and I am able to reproduce this error with a new account:

After starting mozilla mail using `mozilla --mail` I created a user 
"test" and pulled an encrypted message from the server I sent to that 
user before.  There is nothing special with the settings.


I was able to decrypt the message normally.

Then I changed the preferences:

In Preferences->Privacy&Security->Images is an option "Do not load
remote images in Mail & Newsgroup messages".

I checked this option.  It still decrypted properly.

After exiting and restarting mozilla I wasn't able to decrypt the message.

After unchecking that option and restarting mozilla it worked again 
(Indeed it works without having to restart, but that was a later test...).


As I started mozilla from the command line I got kind of a log.  This is 
a plain cut'n'paste without any changes.  The warnings are OK, I am 
logged in via ssh.


Only with mozilla-bin:8582 and mozilla-bin:8679 the message got 
decrypted properly.  These didn't have 
mailnews.message_display.disable_remote_image" set.  The others had this 
option set to "true".


I am not sure if other settings will have a similar effect to the 
behaviour of enigmail.  This is just the first setting I came across my 
tests.



caspar



[EMAIL PROTECTED]:~$ mozilla --mail

** (mozilla-bin:8582): WARNING **: Owner of /tmp/orbit-test1 is not the 
current user


MimeDummy_initialize: class_name=MimeDummy
MimeDummy_parse_begin:
MimeDummy_parse_begin: nchildren=2
MimeDummy_parse_begin: sibling class_name=MimeEncryptedCMS
MimeDummy_parse_begin: sibling superclass_name=MimeEncrypted
MimeDummy_parse_begin: found MimeEncrypted
MimeEnig_init:
MimeEnig_eof:
MimeEnig_free:
[EMAIL PROTECTED]:~$ mozilla --mail

** (mozilla-bin:8621): WARNING **: Owner of /tmp/orbit-test1 is not the 
current user


[EMAIL PROTECTED]:~$ mozilla --mail

** (mozilla-bin:8652): WARNING **: Owner of /tmp/orbit-test1 is not the 
current user


[EMAIL PROTECTED]:~$ mozilla --mail

** (mozilla-bin:8679): WARNING **: Owner of /tmp/orbit-test1 is not the 
current user


MimeDummy_initialize: class_name=MimeDummy
MimeDummy_parse_begin:
MimeDummy_parse_begin: nchildren=2
MimeDummy_parse_begin: sibling class_name=MimeEncryptedCMS
MimeDummy_parse_begin: sibling superclass_name=MimeEncrypted
MimeDummy_parse_begin: found MimeEncrypted
MimeEnig_init:
MimeEnig_eof:
MimeEnig_free:
[EMAIL PROTECTED]:~$ mozilla --mail

** (mozilla-bin:8714): WARNING **: Owner of /tmp/orbit-test1 is not the 
current user


[EMAIL PROTECTED]:~$


signature.asc
Description: OpenPGP digital signature


Bug#334206: mozilla-enigmail not decrypting messages

2005-10-18 Thread Caspar Bothmer

Alexander Sack wrote:

tags 334206 + unreproducible
tags 334206 + sarge
thanks

cannot reproduce this. Maybe pressing decrypt button manually helps?


That doesn't work as the whole message is seen as containing nothing but 
attachments.


I can decrypt the attachment to a browser window, select it there and 
copy and paste it into the empty reply message -- but that isn't very 
comfortable.


I can't reproduce this error with a new account.  It is my existing 
account and deleting XUL.mfasl and chrome/*.rdf doesn't help.  I just 
rechecked it...



caspar


signature.asc
Description: OpenPGP digital signature


Processed: Re: Bug#334206: mozilla-enigmail not decrypting messages

2005-10-17 Thread Debian Bug Tracking System
Processing commands for [EMAIL PROTECTED]:

> tags 334206 + unreproducible
Bug#334206: mozilla-enigmail not decrypting messages
There were no tags set.
Tags added: unreproducible

> tags 334206 + sarge
Bug#334206: mozilla-enigmail not decrypting messages
Tags were: unreproducible
Tags added: sarge

> thanks
Stopping processing here.

Please contact me if you need assistance.

Debian bug tracking system administrator
(administrator, Debian Bugs database)


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#334206: mozilla-enigmail not decrypting messages

2005-10-17 Thread Alexander Sack
tags 334206 + unreproducible
tags 334206 + sarge
thanks

> 
> Encrypted mails get displayed as attachment which one has to save and 
> decrypt on the commandline.  Signed mails get checked normally.
> 
> To check just send a mail to yourself using mozilla-enigmail itself.

cannot reproduce this. Maybe pressing decrypt button manually helps?

-- 
 GPG messages preferred.   |  .''`.  ** Debian GNU/Linux **
 Alexander Sack| : :' :  The  universal
 [EMAIL PROTECTED]   | `. `'  Operating System
 http://www.asoftsite.org  |   `-http://www.debian.org


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#334206: mozilla-enigmail not decrypting messages

2005-10-16 Thread Caspar Bothmer

Package: mozilla-enigmail
Version: 2:0.91.4
Severity: grave


Encrypted mails get displayed as attachment which one has to save and 
decrypt on the commandline.  Signed mails get checked normally.


To check just send a mail to yourself using mozilla-enigmail itself.

This behaviour shows up since the last update of mozilla.  I am using 
the official mozilla packages coming with sarge.



caspar


ii  mozilla-browser 1.7.8-1sarge2
ii  mozilla-enigmail0.91-4
ii  mozilla-mailnews1.7.8-1sarge2
ii  mozilla-psm 1.7.8-1sarge2


signature.asc
Description: OpenPGP digital signature