Re: [Enigmail] startmail user can't decrypt my messages

[Daniel Kahn Gillmor]

On Wed 2015-02-11 07:58:55 -0500, RLB wrote:
> My setup works well with Adele and another live user, but a Startmail
> correspondent can't decrypt. He gets the cyphertext but his Startmail
> doesn't recognize it as being encrypted. Any suggestions?

I think you're talking about https://www.startmail.com/ -- their tech
specs here:

 https://www.startmail.com/documents/whitepaper/whitepaper.pdf

don't seem to mention any details about what they need.

Have you tried sending them mail using PGP/MIME instead of inline PGP?

 --dkg

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Cannot sign or decrypt messages

[Patrick Brunschwig]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 11.02.15 15:25, Dimitri Dhuyvetter wrote:
> On 11-02-15 14:36, Patrick Brunschwig wrote:
>> On 11.02.15 14:17, Dimitri Dhuyvetter wrote:
>>> As of lately it has become impossible for me to sign outgoing 
>>> messages or decrypt incoming messages. Sending encrypted 
>>> messages seems to still work, but saving an encrypted message 
>>> as draft resulted in an empty draft message. I already tried 
>>> un-installing (apt-get purge) Enigmail, but that didn't help.
>> 
>>> I have been using Engimail in Thunderbird on Ubuntu for quite
>>> a while now and it worked fine until now. I have the private 
>>> keys, I have checked in Enigmail Key Management and on pgp 
>>> command line.
>> 
>>> Mails I received and was able to decrypt before I get an error
>>>  now (the padlock with the red circle with a cross) and the 
>>> message:
>> 
 "Enigmail Security Info
 
 Error - decryption failed Public key C6BDEA6A5D9FF1A0 needed
  to verify signature
 
 gpg: decryption failed: secret key not available
 
 Note: the message is encrypted with the following User ID's
 / Keys: 0xC6BDEA6A5D9FF1A0 (Dimitri Dhuyvetter 
 dimi...@dhuyvetter.eu)"
>> 
>>> I am still able to decrypt them using gpg command line, the 
>>> secret key is definitely in my keyring.
>> 
>>> On outgoing messages I try to sign I get the error:
>> 
 Enigmail Alert
 
 Send operation aborted.
 
 Error - bad passphrase
>> 
>>> But I don't get prompted for a password.
>> 
>>> Any tips on how I could proceed to solve these issues?
>> 
>> Did you recently upgrade to GnuPG 2? The most common problem on 
>> Linux is that gpg-agent can't launch pinentry, because the used 
>> pinentry is console-based.
>> 
>> You might want to check if in ~/.gnupg/gpg-agent.conf points to
>> a graphical pinentry tool, such as pinentry-qt or pinentry-gtk 
>> (parameter "pinentry-program".
>> 
>> -Patrick
>> 
> 
> I haven't switched to pgp2, but when I do and try to send a signed
>  message, I get the error:
>> Send operation aborted.
>> 
>> Key 0x8C693450 not found or not valid. The (sub-)key might have 
>> expired.

The problem is that the message from GnuPG is very much misleading if
gpg-agent cannot launch pinentry. GnuPG reports that the key is not
found instead of telling that something went wrong in the interaction
between gpg, gpg-agent and pinentry.

Please add the following line to gpg-agent.conf
pinentry-program /full/path/to/pinentry-...

where ... is gtk, gtk2, qt, qt4 or similar (depending on what is
installed).

Then killall gpg-agent and retry.

- -Patrick

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
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=xLea
-END PGP SIGNATURE-

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Cannot sign or decrypt messages

[Dimitri Dhuyvetter]

On 11-02-15 14:36, Patrick Brunschwig wrote:
> On 11.02.15 14:17, Dimitri Dhuyvetter wrote:
>> As of lately it has become impossible for me to sign outgoing 
>> messages or decrypt incoming messages. Sending encrypted
>> messages seems to still work, but saving an encrypted message as
>> draft resulted in an empty draft message. I already tried
>> un-installing (apt-get purge) Enigmail, but that didn't help.
> 
>> I have been using Engimail in Thunderbird on Ubuntu for quite a 
>> while now and it worked fine until now. I have the private keys,
>> I have checked in Enigmail Key Management and on pgp command
>> line.
> 
>> Mails I received and was able to decrypt before I get an error
>> now (the padlock with the red circle with a cross) and the
>> message:
> 
>>> "Enigmail Security Info
>>> 
>>> Error - decryption failed Public key C6BDEA6A5D9FF1A0 needed
>>> to verify signature
>>> 
>>> gpg: decryption failed: secret key not available
>>> 
>>> Note: the message is encrypted with the following User ID's / 
>>> Keys: 0xC6BDEA6A5D9FF1A0 (Dimitri Dhuyvetter 
>>> dimi...@dhuyvetter.eu)"
> 
>> I am still able to decrypt them using gpg command line, the
>> secret key is definitely in my keyring.
> 
>> On outgoing messages I try to sign I get the error:
> 
>>> Enigmail Alert
>>> 
>>> Send operation aborted.
>>> 
>>> Error - bad passphrase
> 
>> But I don't get prompted for a password.
> 
>> Any tips on how I could proceed to solve these issues?
> 
> Did you recently upgrade to GnuPG 2? The most common problem on
> Linux is that gpg-agent can't launch pinentry, because the used
> pinentry is console-based.
> 
> You might want to check if in ~/.gnupg/gpg-agent.conf points to a 
> graphical pinentry tool, such as pinentry-qt or pinentry-gtk 
> (parameter "pinentry-program".
> 
> -Patrick
> 

I haven't switched to pgp2, but when I do and try to send a signed
message, I get the error:
> Send operation aborted.
> 
> Key 0x8C693450 not found or not valid. The (sub-)key might have
> expired.

0x8C693450 is my own key and hasn't expired or been revoked:
> $ gpg --list-keys 0x8C693450 pub   4096R/0x188E3F108C693450
> 2014-10-07 [expires: 2016-10-06] Key fingerprint = 6FC8 4DA0 8920
> 932D 34DD  CBCD 188E 3F10
8C69 3450
> uid [ultimate] Dimitri Dhuyvetter

> uid [ultimate] Dimitri Dhuyvetter
>  uid [ultimate] Dimitri
> Dhuyvetter

> sub   4096R/0xE690607DD4E5573D 2014-10-07 [expires: 2016-10-06]

Dimitri
<>___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Cannot sign or decrypt messages

[Dimitri Dhuyvetter]

My gpg-agent.conf:

###+++--- GPGConf ---+++###
default-cache-ttl 0
max-cache-ttl 0
###+++--- GPGConf ---+++### di 10 feb 2015 22:00:26 CET
# GPGConf edited this configuration file.
# It will disable options before this marked block, but it will
# never change anything below these lines.

So there isn't anything in there pointing to a graphical tool.

On 11-02-15 14:36, Patrick Brunschwig wrote:
> On 11.02.15 14:17, Dimitri Dhuyvetter wrote:
>> As of lately it has become impossible for me to sign outgoing
>> messages or decrypt incoming messages. Sending encrypted messages
>> seems to still work, but saving an encrypted message as draft
>> resulted in an empty draft message. I already tried un-installing
>> (apt-get purge) Enigmail, but that didn't help.
> 
>> I have been using Engimail in Thunderbird on Ubuntu for quite a
>> while now and it worked fine until now. I have the private keys, I
>> have checked in Enigmail Key Management and on pgp command line.
> 
>> Mails I received and was able to decrypt before I get an error now
>> (the padlock with the red circle with a cross) and the message:
> 
>>> "Enigmail Security Info
>>>
>>> Error - decryption failed Public key C6BDEA6A5D9FF1A0 needed to
>>> verify signature
>>>
>>> gpg: decryption failed: secret key not available
>>>
>>> Note: the message is encrypted with the following User ID's /
>>> Keys: 0xC6BDEA6A5D9FF1A0 (Dimitri Dhuyvetter
>>> dimi...@dhuyvetter.eu)"
> 
>> I am still able to decrypt them using gpg command line, the secret
>> key is definitely in my keyring.
> 
>> On outgoing messages I try to sign I get the error:
> 
>>> Enigmail Alert
>>>
>>> Send operation aborted.
>>>
>>> Error - bad passphrase
> 
>> But I don't get prompted for a password.
> 
>> Any tips on how I could proceed to solve these issues?
> 
> Did you recently upgrade to GnuPG 2? The most common problem on Linux
> is that gpg-agent can't launch pinentry, because the used pinentry is
> console-based.
> 
> You might want to check if in ~/.gnupg/gpg-agent.conf points to a
> graphical pinentry tool, such as pinentry-qt or pinentry-gtk
> (parameter "pinentry-program".
> 
> -Patrick
> 
> 
> ___
> enigmail-users mailing list
> enigmail-users@enigmail.net
> To unsubscribe or make changes to your subscription click here:
> https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net
> 

-- 
Dimitri Dhuyvetter | +32 486 445 747 | dhuyvetter.eu
 | T: @dhuyvetter_eu

<>___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] missing import button

[Philip Jackson]

On 11/02/15 13:14, Patrick Brunschwig wrote:
> On 10.02.15 23:51, Philip Jackson wrote:
>> Running Enigmail version 1.8a1pre (20150202-0013) with Thunderbird
>> 31.4.0 and linux
> 
>> Incoming message causes yellow enigmail header to appear (Part of
>> the message signed with unknown key; click on the 'Import Key'
>> button to download the key)
> 
>> Trouble is that there is no Import Key button displayed.  I have
>> seen this button on several previous occasions (next to the Details
>> button) but not on this message.  Which is from someone for whom I
>> already have a key but not apparently the correct key.
> 
>> The 'Details/enigmail security info' button provides no useful info
>> :
> 
>> "Part of the message signed Unverified signature"  (no key id)
> 
>> Double clicking on his detached signature file gives a dialogue box
>> with his key identity.  Attempting to import this key manually with
>> Key Manager brought two times a failure with success the third
>> time.
> 
>> My guess is that this person has added an ECC subkey to his key and
>> the pool only hit on a key server, third time, which could handle
>> this.
> 
>> In this case, it looks like an occasion when enigmail does not
>> supply a useful response to the situation - no import button, poor
>> security info.
> 
> If the message is not encrypted, could you forward it to me?
> Alternatively, please send me a debug log file (now available via
> Enigmail > Debugging Options > View Log File)
> 

Copy of the email concerned forwarded to you @enigmail.net together with the
logfile,

Philip



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Cannot sign or decrypt messages

[Patrick Brunschwig]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 11.02.15 14:17, Dimitri Dhuyvetter wrote:
> As of lately it has become impossible for me to sign outgoing
> messages or decrypt incoming messages. Sending encrypted messages
> seems to still work, but saving an encrypted message as draft
> resulted in an empty draft message. I already tried un-installing
> (apt-get purge) Enigmail, but that didn't help.
> 
> I have been using Engimail in Thunderbird on Ubuntu for quite a
> while now and it worked fine until now. I have the private keys, I
> have checked in Enigmail Key Management and on pgp command line.
> 
> Mails I received and was able to decrypt before I get an error now
> (the padlock with the red circle with a cross) and the message:
> 
>> "Enigmail Security Info
>> 
>> Error - decryption failed Public key C6BDEA6A5D9FF1A0 needed to
>> verify signature
>> 
>> gpg: decryption failed: secret key not available
>> 
>> Note: the message is encrypted with the following User ID's /
>> Keys: 0xC6BDEA6A5D9FF1A0 (Dimitri Dhuyvetter
>> dimi...@dhuyvetter.eu)"
> 
> I am still able to decrypt them using gpg command line, the secret
> key is definitely in my keyring.
> 
> On outgoing messages I try to sign I get the error:
> 
>> Enigmail Alert
>> 
>> Send operation aborted.
>> 
>> Error - bad passphrase
> 
> But I don't get prompted for a password.
> 
> Any tips on how I could proceed to solve these issues?

Did you recently upgrade to GnuPG 2? The most common problem on Linux
is that gpg-agent can't launch pinentry, because the used pinentry is
console-based.

You might want to check if in ~/.gnupg/gpg-agent.conf points to a
graphical pinentry tool, such as pinentry-qt or pinentry-gtk
(parameter "pinentry-program".

- -Patrick

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
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=jwQ1
-END PGP SIGNATURE-

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

[Enigmail] Cannot sign or decrypt messages

[Dimitri Dhuyvetter]

As of lately it has become impossible for me to sign outgoing messages
or decrypt incoming messages. Sending encrypted messages seems to still
work, but saving an encrypted message as draft resulted in an empty
draft message. I already tried un-installing (apt-get purge) Enigmail,
but that didn't help.

I have been using Engimail in Thunderbird on Ubuntu for quite a while
now and it worked fine until now. I have the private keys, I have
checked in Enigmail Key Management and on pgp command line.

Mails I received and was able to decrypt before I get an error now (the
padlock with the red circle with a cross) and the message:

> "Enigmail Security Info
> 
> Error - decryption failed
> Public key C6BDEA6A5D9FF1A0 needed to verify signature
> 
> gpg: decryption failed: secret key not available
> 
> Note: the message is encrypted with the following User ID's / Keys:
> 0xC6BDEA6A5D9FF1A0 (Dimitri Dhuyvetter dimi...@dhuyvetter.eu)"

I am still able to decrypt them using gpg command line, the secret key
is definitely in my keyring.

On outgoing messages I try to sign I get the error:

> Enigmail Alert
> 
> Send operation aborted.
> 
> Error - bad passphrase

But I don't get prompted for a password.

Any tips on how I could proceed to solve these issues?
-- 
Dimitri Dhuyvetter | +32 486 445 747 | dhuyvetter.eu
 | T: @dhuyvetter_eu

<>___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

[Enigmail] startmail user can't decrypt my messages

[RLB]

My setup works well with Adele and another live user, but a Startmail
correspondent can't decrypt. He gets the cyphertext but his Startmail
doesn't recognize it as being encrypted. Any suggestions?

-- 

RLB


___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] missing import button

[Patrick Brunschwig]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 10.02.15 23:51, Philip Jackson wrote:
> Running Enigmail version 1.8a1pre (20150202-0013) with Thunderbird
> 31.4.0 and linux
> 
> Incoming message causes yellow enigmail header to appear (Part of
> the message signed with unknown key; click on the 'Import Key'
> button to download the key)
> 
> Trouble is that there is no Import Key button displayed.  I have
> seen this button on several previous occasions (next to the Details
> button) but not on this message.  Which is from someone for whom I
> already have a key but not apparently the correct key.
> 
> The 'Details/enigmail security info' button provides no useful info
> :
> 
> "Part of the message signed Unverified signature"  (no key id)
> 
> Double clicking on his detached signature file gives a dialogue box
> with his key identity.  Attempting to import this key manually with
> Key Manager brought two times a failure with success the third
> time.
> 
> My guess is that this person has added an ECC subkey to his key and
> the pool only hit on a key server, third time, which could handle
> this.
> 
> In this case, it looks like an occasion when enigmail does not
> supply a useful response to the situation - no import button, poor
> security info.

If the message is not encrypted, could you forward it to me?
Alternatively, please send me a debug log file (now available via
Enigmail > Debugging Options > View Log File)

- -Patrick

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
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=9881
-END PGP SIGNATURE-

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Uninstall

[Bob Williams]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On 11/02/15 03:48, Robert J. Hansen wrote:
>> The same way you would any other Thunderbird extension.  Click
>> "Tools", "Add-Ons", then "Extensions," and then on Enigmail's
>> "Remove" button.
> 
> Oh, man.
> 
> *headdesk*
> 
> I'm so sorry, Jim, I completely misread your request!  That's
> entirely on me.  I'm sorry.
> 
Well Robert, I don't blame you. The subject line says 'Uninstall',
whereas the message body asks how to *install* Enigmail.

Bob
- -- 
Bob Williams
System:  Linux 3.16.7-7-desktop
Distro:  openSUSE 13.2 (x86_64) with KDE Development Platform: 4.14.3
Uptime:  06:00am up 7:55, 3 users, load average: 0.16, 0.05, 0.06
-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iEYEARECAAYFAlTbPQAACgkQ0Sr7eZJrmU5/VQCgqd06o/I14qwnyYeNwodVx9XX
dXUAoJ+fWx0KcvI6dRDFA8AyY+W3q5UE
=wKya
-END PGP SIGNATURE-

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net