Re: [Enigmail] Nightly 59.0a1

2017-12-22 Thread Ludwig Hügelschäfer
On 22.12.17 09:57, Frank wrote:
> Hello,
> 
> when do you will make a new addon for Nightly 59.0a1 ???

Thunderbird with version numbers higher than 57 require Enigmail nightly
version: https://www.enigmail.net/index.php/en/download/nightly-build

HTH

Ludwig






signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Signed E-Mail flickering in preview and its own window

2017-10-26 Thread Ludwig Hügelschäfer
Hallo Partrick,

On 26.10.17 08:15, Patrick Brunschwig wrote:
> 
> This can be a valid result if the email is only partially signed, or if
> it's both PGP and S/MIME signed.

It is double signed, both OpenPGP and S/MIME:

--===2094097271970638626==
Content-Type: multipart/signed; micalg=sha-256;
protocol="application/pkcs7-signature";
 boundary=+permail-2017102014511105be2aed2fc6-perske+cmssigned+


--+permail-2017102014511105be2aed2fc6-perske+cmssigned+
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature";
 boundary=+permail-2017102014511105be2aed2fc6-perske+pgpsigned+


etc. etc.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Signed E-Mail flickering in preview and its own window

2017-10-25 Thread Ludwig Hügelschäfer
Hi Patrick,

On 25.10.17 16:18, Patrick Brunschwig wrote:

I could reproduce the problem on Windows with 1.9.8.3. Log and the
incrementing message come per PM.

> Could you try a nightly build of Enigmail to see if the problem persists?

The nightly doesn't flash. However, the signature is not verified. It
simply shows the signature.asc as attachment.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Thunderbird 52.4 (56) released.

2017-10-20 Thread Ludwig Hügelschäfer
On 18.10.17 20:05, David Boles wrote:
> 
> I get this popup:

Yes, but it doesn't help for debugging your case. For further help
please check if you have any exceptions in TB error console? (Tools ->
Developer Tools -> Error console)

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Thunderbird 52.4 (56) released.

2017-10-18 Thread Ludwig Hügelschäfer
On 18.10.17 18:49, David Boles wrote:
>
> Different profiles.

That's a wise decision. :-)

Do you have any exceptions in TB error console? (Tools -> Developer
Tools -> Error console)

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Enigmail stopped accepting my passphrase

2017-10-18 Thread Ludwig Hügelschäfer
On 18.10.17 01:07, Annika Schäfer wrote:
> Hi,
> 
> when I wanted to sign an email today I realised, that Enigmail does not
> accept my passphrase anymore. Trying to decrypt some old emails had the
> same result. It simply shows a message stating that the provided
> passphrase is invalid. I checked my sent emails and found a two days old
> email with a correct signature from me. My PGP-keypair is three years
> old now and I never changed the passphrase. Therefore, I either somehow
> managed to make the same mistake when typing the passphrase for the last
> three years or the passphrase I enter is correct.
> Currently I'm on Windows 8.1 with Enigmail version 1.9.8.3 and
> Thunderbird 52.4.0.
> I also have another laptop running debian that my PGP-keypair is saved
> on. This laptop has not been used for months now, but when I tried to
> decrypt some old email on this one I also got the message that my
> passphrase is incorrect. I even turned off the Wifi on this laptop prior
> to opening IceDove, to prevent it from downloading anything.
> Also, I tried to uninstall Enigmail on the Windows laptop and then
> reinstall it, but this didn't change anything, turning the laptop off
> and on again either.
> I found someone on the Internet with a similar problem who was able to
> change his passphrase using gnome-keyring, but after installing a GUI
> that was able to access gnome-keyring, it also didn't accept my passphrase.
> 
> Is there anything I could do to get my keypair working again? And if
> not, any suggestions what caused this problem, so that I can avoid it in
> the future?
> 
> Find the logentry of my last attempt to decrypt an old email attached.
> Please excuse the german error messages within the log, I'm running
> Enigmail in german. But this should only concern the displayed messages,
> as far as I can see the internal messages are in english and cover every
> error.

Well, the log is very clear: The passphrase passed to GnuPG is wrong. Do
you have special characters in your passphrase (umlauts, accented
characters, etc.)? Did you switch the language of your keyboard?

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Thunderbird 52.4 (56) released.

2017-10-18 Thread Ludwig Hügelschäfer
On 18.10.17 17:32, David Boles wrote:

> Their release numbering can be confusing.  The release 52.4  (52 + 4=56)
> And when they get around to it, they can be slow, their new beta will be 57.
> 
> What I said was that for me using Win 10, that the current release of
> Enigmail and the Nightly from today, Wed, does not work with the new
> TBird 52.4.

Am I right with my assumption that you did use your Thunderbird profile
with several prerelease versions of Thunderbird? Such combinations may
modify the profile data in a way that a rollback to a previous
Thunderbird version results in malfunction. Backups can help in this
situation :-) Manual repair is possible sometimes, but only for the bold
ones... BTDT.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] The SSL certificate on enigmail.wiki is expired!

2017-10-16 Thread Ludwig Hügelschäfer
On 16.10.17 08:11, Az wrote:
> The SSL certificate on enigmail.wiki is expired. Please renew it.

Thanks for reporting. We'll take appropriate action.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Enigmail is very slow to check signatures

2017-10-13 Thread Ludwig Hügelschäfer
Hi, Andreas,

On 13.10.17 10:04, Andreas Glaeser wrote:
> 
> Enigmail is so slow to check signatures, that it makes large attachments
> practically impossible to re-check with Thunderbird on low-end PC. I
> suspect the hashing-algorithm is too slow, it may be due to
> double-hashing. Evolution for example is configurable in this respect,
> i.e. which SHA-variant one wants to use, Enigmail is not. SHA256 should
> be sufficient in any case.

Well, the hashing algorithm is selected by the sender, not by the
receiver. The default is set at generation of the senders key. It can be
overridden by specifying the hashing algorithm by the sending party.
This is probably what you mean by Evolution allowing this, however,
Enigmail does not. So far for the theory.

Can you give some figures for what you mean "too slow"? Which time does
verification need for which message/attachment size, using which
signature algorithm?

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Generate Key: Where does "Account / User ID" come from?

2017-10-08 Thread Ludwig Hügelschäfer
On 08.10.17 21:28, Alexander Buchner wrote:
> Hi,
> 
> I just noticed that the "Generate OpenPGP Key" dialog lets me choose
> between different User IDs. SO far, so good.
> Where does this info come from?
> 
> I'm asking because I can choose an account which I can't find in my
> Thunderbird Account settings. It has to be some leftover of an old account.
> Where can I find (and perhaps finally delete) this ghost account?

Well, in Thunderbird every account can have multiple identities attached
to it. It's a bit difficult to see them all, the corresponding dialog is
not easy to find.

Go to account settings, select your account. In the lower right just
above the "Ok" button there's a button "Manage identities". A list of
all identities attached to this account is displayed. Each identity can
have it's own settings, which you can reach if you press the "Edit"
button. You can also delete unnecessary identities.

HTH

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Windows "Download OpenPGP Keys" not sortable?

2017-09-28 Thread Ludwig Hügelschäfer
Hi,

On 28.09.17 23:12, Alexander Buchner wrote:
> Hi,
> 
> is it just me or are the entries in "Download OpenPGP Keys" (Enigmail
> Key Management --> Keyserver --> Search for Keys --> OK) not sortable?

No, the key list is not sortable. Might be useful in case you have a lot
of search results, though.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Auto-update fails with TB 55.0b2

2017-07-28 Thread Ludwig Hügelschäfer
Hi HJ,

On 28.07.17 17:47, H J via enigmail-users wrote:
> Hello,
> 
> I have TB 55.0b2 and the currently installed version of Enigmail
> is 1.9.7. When I use the built-in update checker, it says no newer
> versions of Enigmail are available -- but from enigmail.net I see
> that the latest is now 1.9.8.1.
> 
> The only possible wrinkle I can think of is that I Torify all my mail
> connections via Torbirdy -- but in theory that should (I think) only
> affect SMTP and IMAP. So is the Enigmail update mechanism
> broken in TB 55.0b2, broken in general, or working normally and
> only affected by my Torified connection?
> 
> Thanks in advance for any guidance,

Enigmail 1.9.7 is still the newest offered for update on
addons.mozilla.org
(https://addons.mozilla.org/de/thunderbird/addon/enigmail). Enigmail
1.9.8.1 is still being reviewed by Mozilla (this is mandatory before
being published). So, there's nothing wrong with the built-in update
checker.

You may as well install Enigmails newest version from the Enigmail
website :-)

HTH

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Display of verified in-line messages

2017-07-16 Thread Ludwig Hügelschäfer
Hi Doug,

On 16.07.17 07:29, Doug Barton wrote:
> 
> Good news, it's fixed. :)
> 
> Bad news, it was none of the above (although I did try them one by one).
> There were some stale configuration items in my gpg.conf which were
> throwing errors. Once I corrected that, the display problem I described
> in this thread with in-line messages stopped happening.
> 
> One of the errors was, "gpg: keyserver option 'verbose' is unknown" and
> the other was related to a missing keyring (I separate my keys into
> multiple different rings by category).
> 
> I'm pretty sure that I've had errors in my conf file before that didn't
> create this issue. It seems like this is something that enigmail should
> handle more gracefully, and I think it used to do so in the past,
> although I couldn't nail down a date/version. OTOH at least I have a
> consistent way to reproduce the error, so hopefully that will make it
> easier to track down.

Which GnuPG version are you running? Which were the offending commands
in gpg.conf? If possible, we'd like to reproduce the problem, this
usually helps speeding up debugging and fixing!

Ludwig

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] ALLOW PASTING

2017-07-06 Thread Ludwig Hügelschäfer
Hi,

On 06.07.17 15:12, Lancon Erocan wrote:
> Hi,
> I know there is indeed security issue on auto-filling, but there is no
> reason to disallowing pasting. In that case I have no mean to input a
> /*REALLY */secure password generated from my password manager.
> Pls, /*DO NOT*/ F**K with pasting.

Please moderate your tune. This not considered the right vocabulary
here. Alos, you're barking up the wrong tree: Enigmail does NOT supply
the Pinentry dialog.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Problem after Thunderbird 52.1.1?

2017-06-15 Thread Ludwig Hügelschäfer
Hi Yannick,

On 14.06.17 19:26, Yannick Le Roy wrote:
> Hi Martyn,
> 
> I wrote that i have not been able to open enigmail, using Unpacker.

If you have downloaded the Enigmail XPI file, you don't need to unpack
it. Just add the XPI to Thunderbirds Add-on page, either by drag and
drop or by using "Install Add-on from file".

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Problem after Thunderbird 52.1.1?

2017-06-14 Thread Ludwig Hügelschäfer
Hi Martyn,

On 14.06.17 17:00, Martyn Thomas wrote:
> I'm finding that the "creating message"message starts and never finishes.

this is a know problem. Can you try the following (inofficial) test
version of Enigmail:

https://enigmail.net/download/beta/enigmail-1.9.8-a4.xpi

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Lost draft messages

2017-06-07 Thread Ludwig Hügelschäfer
On 06.06.17 23:27, David Boles wrote:

[Drafts being encrypted]

> Menu Bar > Tools > Account Settings > OpenPGP Security > (The actual
> page is titled "Openpgp Options") > uncheck the last box/line > "Encrypt
> draft messages on saving" > click "Okay" button. You have to do this of
> each account using Enigmail.

Thanks for correcting me. Encryption of drafts CAN be disabled despite I
said the opposite.

> Sadly for some reason this setting is a default and it resets to "true"
> (checked) by itself from time to time.

Can you say, under what circumstances this did happen? This would indeed
be a bug.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Lost draft messages

2017-06-06 Thread Ludwig Hügelschäfer
Hi Simon,

On 06.06.17 21:03, Roland Siemons wrote:
> Dear Ludwig,
> 
> Where can I find my Enigmail version. I cannot find such info under the
> Enigmail menu inside TB.

Thunderbird menu -> Enigmail -> About Enigmail

> There was no request from TB/Enigmail for a pinentry. So I did not
> cancel it. The encryption just happened, apparently (which I found out
> when I tried to edit the saved draft message, and couldn't).

What happens, if you close and restart Thunderbird? Are there gpg or
gpg2 processes active before you try to edit the draft? To find out,
open the windows task manager and sort by application name.

> I am not using IMAP, so want to switch off that automatic encryption.
> Can I make that choice?

No, you can't. Draft encryption is automatically enabled for all
accounts where Enigmail is enabled.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Lost draft messages

2017-06-06 Thread Ludwig Hügelschäfer
Hi Roland,

On 06.06.17 15:32, Roland Siemons wrote:
> Dear Enigmail,
> 
> Using TB 52.1.1 + Enigmail

Which Enigmail version are you running?

> When upon opening a saved draft email message for further editing, I
> receive the following error:
> "Enigmail Alert
> Enigmail Security Info
> Error - no matching private secret key found to decrypt message
> gpg: decryption failed: No secret key
> Note: The message is encrypted for the following User ID's / Keys:
> 0x1594F1502D7EF3B9 (Roland Siemons )"
> 
> That's my key! I usually can decrypt messages encrypted for myself. So,
> why can't I now?

GnuPG found that your key was not accessible. Did you cancel the
Pinentry passphrase dialog?

> Why does TB at all encrypt that draft message? Can I instruct
> TB/Enigmail to refrain from doing that? (It seems useless to me)

Enigmail does not know (and can't know) where email drafts are stored.
Many people use IMAP draft folders on the server, so not encrypting
drafts is a safety risk, that's why this feature was introduced.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Enigmail Key Management - Expiry date 1/1/70

2017-05-25 Thread Ludwig Hügelschäfer
On 25.05.17 12:45, Patrick Brunschwig wrote:
> On 25.05.17 11:39, Ludwig Hügelschäfer wrote:

>> Sorry, but I have at least one key that doesn't look good:
>>
>> gpg2 --list-key 0x36E8A8EE
>> pub   dsa1024 2007-04-25 [SC] [expires: 2099-12-31]
>>
>> This still results in Enigmail key manager (and key properties) display
>> of 1.1.00. (This is with both TB 52 and 54b1).
>>
>> Maybe we should go for 4-digit years.
> 
> This won't help. This probably simply a problem of time zones. The
> expiry date is represented as seconds after 1.1.1970. The key expiry
> date represented as long date/time in Thunderbird results in the
> following output:
> 01.01.2100, 00:00 MEZ
> 
> The same date minus one second results in:
> 31.12.2099, 23:59 MEZ

This is correct. I'm sorry, I wasn't clear enough. I think the 2 digit
year display of "00" could be misleading by being interpreted as
1.1.2000. Same could go for the late 19-nineties as opposed to 2090 up.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


[Enigmail] Enigmail Key Management - Expiry date 1/1/70

2017-05-25 Thread Ludwig Hügelschäfer
On 25.05.17 11:28, Christian Riechers wrote:
> On 5/25/17 11:08 AM, Patrick Brunschwig wrote:

>> I fixed this on master. Can you please try the latest nightly build from
>>
>> https://enigmail.net/index.php/en/download/nightly-build
> 
> Wow, that was quick.

Indeed! :-)

> Looks all good now.
> Thank you.

Sorry, but I have at least one key that doesn't look good:

gpg2 --list-key 0x36E8A8EE
pub   dsa1024 2007-04-25 [SC] [expires: 2099-12-31]

This still results in Enigmail key manager (and key properties) display
of 1.1.00. (This is with both TB 52 and 54b1).

Maybe we should go for 4-digit years.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Problems sending PGP encrypted messages since updating to TB 52.1.0 (32-Bit)

2017-05-23 Thread Ludwig Hügelschäfer
On 5/23/17 10:06 PM, Christian Riechers wrote:
> On 5/23/17 8:28 PM, Patrick Brunschwig wrote:
>> I think that you have a few issues that are not related to Enigmail but are 
>> more general Thunderbird issues. The date error does not make any sense to 
>> me. I'm simply using a standard TB function to display the date in your 
>> locale.
> 
> I don't disagree. But the date error started only with TB 53 beta.
> There's no such problem with TB52.

This is indeed a TB issue. Just tried with 54.0.b1, see attachment.

1/1/00 shown in the attachment is in reality a key with expiry date
shown by GnuPG as "expires: 2099-12-31"

This should be reported against TB.

Ludwig


signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] regarding "how to turn off constant dialog prompt by Enigmail in background? "

2017-05-16 Thread Ludwig Hügelschäfer
Hi,

On 16.05.17 15:19, Dr M C Nelson wrote:
> Despite the discussion in the captioned thread some several years ago,
> the bug has not been fixed.
> 
> Enigmail persistently prompts for the password for openpg, stealing the
> focus in the process.
> 
> There is no apparent rhyme or reason for which email recipients or
> accounts for when it chooses to do this.
> 
> If I do not click to encrypt or sign the email, and there is no
> automatic behavior of this sort explicitly turned on, then it should not
> be happening.

There is automatic behaviour, scanning mails in the background, done by
Thunderbird processes. This triggers Enigmail decryption.

You usually solve this kind of trouble by adding a passphrase caching
time. Enigmail -> Preferences, "Basic" tab, "Remember passphrase for x
minutes of idle time." Select x.

> It is impossible to work with emails with this installed.

Agreed, but this is not normal behaviour.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Always the wrong key

2017-05-02 Thread Ludwig Hügelschäfer
Hi,

On 02.05.17 17:19, Thomas Hoffmann wrote:
> Hello,
> 
> would be nice if you could answer my question. Wehn i try to send an
> encrypted message the addon never chooses the key i click to encrypt it
> with. It always chooses a different one, i did not check in the box. You
> know how to fix this?

Do both keys belong to the same user/mail address? Are both keys
displayed as "valid"?

Ludwig

(CC'ing because not subscribed)



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Encryption and Signing

2017-04-12 Thread Ludwig Hügelschäfer
Hi Oliver,

On 12.04.17 15:42, Oliver Jay wrote:
> Hello.
> 
> I'm confused. I have send some mails using Enigmail through Thunderbird,
> but one of the "victims" could read any of the mail.
> 
> How does others decrypt my message?

Not only you, but also they need an OpenPGP key pair and suitable
software. And each of you need to have (and verify) the public key of
your recipients.

> In the encryption menu, you choose a
> reciepent and there's only my name. Is this like it should?

You can only communicate securely with those who have a suitable setup
(software and own key pair), and after you have exchanged and verified
each others public keys.

> Or do i have made an error with Enigmail/encryption?

No, you didn't. You only tried too early :-)

If you want to read more, please go here:
https://enigmail.wiki/Introduction_to_Cryptography,_PGP,_and_Enigmail

HTH

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] TBird 45.8.0 and Enigmail 2.0a1pre

2017-03-27 Thread Ludwig Hügelschäfer
On 27.03.17 19:19, David wrote:

[Screenshots]

Did you install a theme in Thunderbird? If yes, is the display correct
when you switch to the default theme?

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] a flaw maybe?

2017-03-15 Thread Ludwig Hügelschäfer
Hi Dana,

On 15.03.17 15:57, Dana Booth wrote:
> I wanted to try Enigmail, wanted to get back to encryption. When I tried
> to sign a message, I realized I couldn't remember the password for my
> old key. I created a new one, but Enigmail insists on wanting to use my
> old key, even though it's been deleted. I can't find where I can make it
> use another key

You have to tell Enigmail to use the last generated key. Right now, it
uses the first it can find - and that's the old one.

You should open the settings of the account you want to use with
encryption. Then select "OpenPGP security".

Next, use the "Use specific OpenPGP key ID" should be selected. Click on
the "Select key..." button. A key listing should open. Select the key
you want to use.

If you have further questions, please ask!

Ludwig

CC'ing because you're not subscribed.




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] recipient-rules list for multiple users

2017-03-14 Thread Ludwig Hügelschäfer
Hi Boris,

On 11.03.17 12:46, Boris wrote:
> Hej Enigmail-list,
> 
> 
> New to this list, first let me give a big thank to enigmail and it's
> developers and supporters!
> I'm using enigmail on TB on Debian Linux since - I want say decades
> What a great software!

Thanks!

> And here's my question:
> In a different environment Enigmail runs on TB on Windows-Terminalserver
> for around 15 users.
> 
> I wonder if it could be possible to have a shared recipient-rules list
> for all 15 users. Can that be done with a shared addressbook?

TB's addressbook is not the reference for the per-recipient rules. They
are stored in the users profile directory under the name "pgprules.xml".

I'm not familiar with Windows terminal server. Are the profiles stored
on the server? If yes, maybe a link to a common used file, replacing the
pgprules.xml file in each users profile can be a working solution. You'd
have to experiment, since links on windows can be tricky.
https://msdn.microsoft.com/de-de/library/windows/desktop/aa365006(v=vs.85).aspx
may be helpful.

> Thanks in advance and enjoy the weekend!

You're welcome!

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Steps

2017-03-11 Thread Ludwig Hügelschäfer
Hi,

On 11.03.17 00:40, thetasig wrote:

(...skipping the solved problem and commenting on the open points...)

> At first, I didn't notice that there is a separate installed application
> (GPG Keychain.app) together with the extension to Thunderbird. I thought
> the keychain was accessed from the extension.

That's part of the GPG Suite for Mac supplied by GPGTools. This suite is
installed by Enigmails setup wizard on Mac OS X.

Of yourse, you can use GPGKeychain.app to view and edit your keyring,
but if you want to make use of the changes made there (or generally
said: outside of Enigmail), you must either open Enigmails key manager
and select "Reload key cache" or restart Thunderbird.

Alternatively, all operations on your key pair, such as extending the
exiry date, setting "Owner trust" level, etc. can be done from Enigmails
key manager.

It's your choice which GUI you want to use :-)

> I noticed that one of your web site FAQ answers shows an old dialogue
> that is different than the actual dialogue window.
> 
> https://gpgtools.tenderapp.com/kb/gpg-keychain-faq/how-to-adjust-add-or-remove-an-expiration-date-of-a-key

Ah, well, that's the GPGTools support website. You'd have to file a bug
at the GPGTools support asking for changing their screenshot.
(https://gpgtools.tenderapp.com/)

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Steps

2017-03-10 Thread Ludwig Hügelschäfer
Hi Mark,

On 10.03.17 17:54, mark crosby wrote:
> It is not clear at all how to exchange encrypted emails with others.
> 
> I have to assume (not found in FAQ) that I would have to send my public
> key to all people with whom I wish to exchange encrypted messages.

Right.

> And
> need to know if this is sent before or after they have installed
> compatible encryption software on their own computer.

No, it's not relevant to know this. They can save the key - which
appears as attachment to a mail - and keep it until they installed the
right software. Then they can import it.

> However, I cannot "find" the Enigmail keychain dialogue (shown in the
> site first steps) on my Mac in Thunderbird under the Enigmail drop-down
> menu. But I did send my key to myself as the first test. I can find the
> Enigmail Key Management dialogue, but it is different than shown in the
> help site.

Which FAQ and which first steps are you referring to?

> So - how to send public key to friends?

That's easy. Compose a mail to them and select from the menu "Enigmail
-> Attach my public key".

> Second, I assume (again not in the FAQ) that friends will need to also
> need to get the GPG plug-in/extension.

Right. They have to install the suitable Extension for their mailclient.

> But does that work in other email
> applications such as Mac Mail, MS Outlook? What is the name of each
> piece of encryption software needed for other than Thunderbird mail clients?

There is a comprehensive list available at
https://gnupg.org/related_software/frontends.html

HTH

Ludwig

(CCing because you're not subscribed)




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Impossible to generate key

2017-02-28 Thread Ludwig Hügelschäfer
Hi Anders,

On 27.02.17 16:47, Anders Bateva wrote:
> Good! Now the key manager loads all the keys.

Very good!

> I changed the expiry date,
> disabled and revoked all of them that I could. 1 or 2 I couldn't due to
> not being able to enter the correct password for them.

As Doug wrote: If you haven't used them (nothing encrypted to them) and
not send them elsewhere, just delete all you don't need any longer.

If I were you, I'd try to find out why some of the files in the ~/.gnupg
directory were owned by root. This is NOT the behaviour of a standard setup.

This is all to avoid such a painful recovery again and maybe can help
others to run into the same situation as you.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Impossible to generate key

2017-02-21 Thread Ludwig Hügelschäfer
On 21.02.17 20:55, Anders Bateva wrote:
> Debugging doesn't bugs me.
> 
> Here is the log. I noticed that, 16 times, it tried to open
> "trustdb.gpg" and had "permission denied" ("Permissão negada"). Probably
> isn't what should happen.

No, under these conditions gpg can't work satisfactory. Please repair
the permissions of your ~/.gnupg directory.

chmod -R u+rwx ~/.gnupg
chmod -R go-rwx ~/.gnupg

This can also be done via your file managers GUI.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Impossible to generate key

2017-02-21 Thread Ludwig Hügelschäfer
Hi Anders,

On 21.02.17 20:18, Anders Bateva wrote:
> gpg -K shows nothing
> 
> gpg2 -K shows the keys
> 
> So, the storage is different. But I generated all of them on gpg2 and
> they are stored on gpg2 and Enigmail access gpg2.

This is all very strange. To find the root of your problems, we would
need to see the debug log not only during startup, but during the launch
of Enigmails key manager. Sorry to bug you for more and more debugging
actions.

So please, restart Thunderbird, and immediately after it is accessible,
start Enigmails key manager. Then store the log. Thanks for your
cooperation.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] imposible to generate key

2017-02-21 Thread Ludwig Hügelschäfer
On 21.02.17 20:25, Mike Acker wrote:
> could be a problem between Enigmail and GPG2.1 .
> 
> i think gpg2.1 has only recently become available

I'm using gpg 2.1 since more than a year together with Enigmail.

> what i would try: set Enigmail to use gpg rather than gpg2.   go back
> and generate a key using gpg then rather than gpg2.1this clearly
> isn't where you want to end up but the test results could very likely be
> useful

This will not reveal the reason of Anders' problems, I'm afraid.

> you are not playing with EC Curves   are you?

Enigmail together with gpg2.1 can display EC Curve based keys perfectly.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Impossible to generate key

2017-02-21 Thread Ludwig Hügelschäfer
On 21.02.17 17:53, Anders Bateva wrote:
> Path is already set to  /usr/bin/gpg2 by default.

Anders, did you check the checkbox "Display All keys by Default"?

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Impossible to generate key

2017-02-18 Thread Ludwig Hügelschäfer
On 18.02.17 13:21, Anders Bateva wrote:
> Em 16/02/2017 19:03, Ludwig Hügelschäfer escreveu:
>> On 16.02.17 21:41, Anders Bateva wrote:
>>
>>> Maybe... It's communicating with gpg (v1) instead of gpg (v2)? That
>>> symlink thing that was initially told?
>>
>> That's a possible reason. To be sure, would you please create a debug
>> log file after a startup of Enigmail (Instructions are here:
>> https://enigmail.net/index.php/en/faq?view=topic&id=15#faqLink_6) and
>> post it here. You may want to obfuscate personal information in the file
>> before posting it here.
>
> Log attached.

This looks all unproblematic. Enigmail finds gpg2 and will use it. There
should be no problem at all when using Enigmail. To clarify what has
happend, would you please check the output of the following commands:

gpg -K

and

gpg2 -K

(remind that K is a capital letter). If the outcome is different, then
you generated your key with one gpg version, Enigmail uses the other and
they have different storage systems.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Impossible to generate key

2017-02-16 Thread Ludwig Hügelschäfer
On 16.02.17 21:41, Anders Bateva wrote:
> 
> Em 16/02/2017 18:36, Ludwig Hügelschäfer escreveu:
>>
>> Try to open Enigmails key management. Select "Reload key cache". Is
>> there still no key pair (keys in bold and pub/sec in the Type column)
>> displayed? If not, Enigmail has a communication problem with GnuPG.
>
> Enigmail->OpenPGP key manager (or management)-> blank list
> File->Reload key cache-> blank list
> Conclusion: Enigmail has a communication problem with GnuPG.
> 
> Maybe... It's communicating with gpg (v1) instead of gpg (v2)? That
> symlink thing that was initially told?

That's a possible reason. To be sure, would you please create a debug
log file after a startup of Enigmail (Instructions are here:
https://enigmail.net/index.php/en/faq?view=topic&id=15#faqLink_6) and
post it here. You may want to obfuscate personal information in the file
before posting it here.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Impossible to generate key

2017-02-16 Thread Ludwig Hügelschäfer
On 16.02.17 21:24, Anders Bateva wrote:
> Em 16/02/2017 17:24, Ludwig Hügelschäfer escreveu:

>>> Now, what should I do, in order to start using the key pair on my
>>> Thunderbird client, "/gpg2 --send-keys/"?
>>> And how to "cancel" the previous key pairs, "/--delete-keys/",
>>> "/--gen-revoke/"?
>> As Doug said: If they were never used and are not uploaded or sent
>> anywhere, just delete them.
>
> I never sent an e-mail using them, but I don't know if they were
> automatically uploaded by my e-mail client.

Enigmail does not publish your public key without your consent.

>> The next thing to do is to tell Enigmail to use the last generated key.
>> You should open the settings of the account you want to use with
>> encryption. Then select "OpenPGP security". The checkbox "Enable OpenPGP
>> support" should be selected.
>>
>> Next, use the "Use specific OpenPGP key ID" should be selected. Click on
>> the "Select key..." button. A key listing should open. Select the key
>> you want to use.
>
> The Enigmail key list is blank as always.

Try to open Enigmails key management. Select "Reload key cache". Is
there still no key pair (keys in bold and pub/sec in the Type column)
displayed? If not, Enigmail has a communication problem with GnuPG.

> Wouldn't I need first to add
> the key pair generated on terminal to the Enigmail interface?

No. Enigmail uses GnuPG for key storage as well as for all cryptographic
operations.

> And to a key server? But I don't know how, would it be "--export" and 
> "--send-keys"?

This would be the next step after fixing your setup.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Impossible to generate key

2017-02-16 Thread Ludwig Hügelschäfer
Hi Anders,

On 16.02.17 18:36, Anders Bateva wrote:
> Hello I used /"gpg2 --full-gen-key/", and a key pair was generated in
> less than 10 minutes.

That's quite long and an indication of missing entropy.

> But, after generating, I used "/gpg2 -k/" and
> discovered there are 5 keys for my e-mail address on my computer.
> Appears some of the earlier tentatives of creating the key pair really
> created a key pair. Those are set to expire on 2021 or 2022. The one I
> created right now is set to expire on 2018.

Having an expiry date is not a bad idea. I once was glad that an
unusable, but uploaded key had an expiry date set. If it is near, then
you can easily extend the expiry period. Enigmail will tell you when the
expiry is near. You then can decide what to do.

> Now, what should I do, in order to start using the key pair on my
> Thunderbird client, "/gpg2 --send-keys/"?
> And how to "cancel" the previous key pairs, "/--delete-keys/",
> "/--gen-revoke/"?

As Doug said: If they were never used and are not uploaded or sent
anywhere, just delete them.

The next thing to do is to tell Enigmail to use the last generated key.
You should open the settings of the account you want to use with
encryption. Then select "OpenPGP security". The checkbox "Enable OpenPGP
support" should be selected.

Next, use the "Use specific OpenPGP key ID" should be selected. Click on
the "Select key..." button. A key listing should open. Select the key
you want to use.

If you have further questions, please ask!

Ludwig





signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Impossible to generate key

2017-02-15 Thread Ludwig Hügelschäfer
On 15.02.17 22:15, Anders Bateva wrote:

>> As I stated previously Enigmail seems to depend on /usr/bin/gpg being
>> version 2 of GnuPG.
>>
> Do you have any suggestion about this? I depend on gpg1 for my VPN
> client, and gpg2 for Enigmail. So I can't just remove "gpg1" and turn it
> into a symlink. I decided to ask on the IRC channel of the VPN provider
> too, now, as they are involved on this matter.

gpg2 and gpg1 can coexist peacefully on a machine without affecting
Enigmail operation.

Anders, did you try

gpg2 --gen-key?

What was the outcome?

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] How to specify which key to use for signing?

2017-01-25 Thread Ludwig Hügelschäfer
Hi,

On 25.01.17 21:24, Thomas Nyberg wrote:
> Hello,
> 
> I have two different email addresses that I use in the same Thunderbird
> account: fi...@email.org and sec...@email.org. When I try to send an
> email as either fi...@email.org or sec...@email.org, it will always use
> the fi...@email.org's key when I try to sign an email. How do I make it
> use the other key? Why does it not try to use that key automatically
> since they're both available in my keyring and can both be found for
> encryption/decryption purposes?

Do you have two accounts or one account with two identities? If you have
two accounts, Alexander's reply is sufficient.

If you have configured one account with two (or more) identities, then
you have to go through all these identities. Go to: Tools -> Accounts ->
Select your account -> Click on "Manage Identities". A popup dialog
comes up. Then select - one after another - all your identities you want
to use with Enigmail by clicking on "Edit", selecting the "OpenPGP
Security" tab and making the approtiate settings.

This UI design is given by Thunderbird and in my eyes, well, lets say
not intuitive. Too many settings are hidden under a tiny button.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] GnuPG cannot query your passphrase via pinentry

2017-01-24 Thread Ludwig Hügelschäfer
On 24.01.17 21:44, Nick Weisser wrote:
> Thanks for the pointer, Ludwig.
> 
> I actually used the locate command on macOS terminal, but it didn't find
> anything. Probably the search database is not up to date or it does not
> fine files in hidden folders by default.

the latter, I'm afraid:

:~ Di Jan 24 22:23$ locate gpg-agent.conf
:~ Di Jan 24 22:23$

So, no hit. However, 'find' detects it.

:~ Di Jan 24 22:23$ find . -name gpg-agent.conf -print
./.gnupg/gpg-agent.conf


> My gpg-agent.conf file only contains 2 lines:
> 
> default-cache-ttl 300
> max-cache-ttl 99

That's ok.

> Anyway, the update fixed it, but it somehow strange that this already
> happened for the 3rd time. I'm pretty sure that it's not the update
> itself that's fixing it but probably some kind of permission or other
> reset, but I'm only speculating.

Could you please report back if it happens again? As gpg-agent.conf is
not the culprit, the installation files should be checked.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] GnuPG cannot query your passphrase via pinentry

2017-01-24 Thread Ludwig Hügelschäfer
Hi Nick,

On 24.01.17 20:02, Nick Weisser wrote:
> On 23/01/2017 16:46, Patrick Brunschwig wrote:
>> Did you check that gpg-agent.conf does not contain a line like the
>> one below?
>>
>> pinentry-program /path/to/wherever
>
> Thanks for the feedback, Patrick.
> 
> I tried to locate gpg-agent.conf to no avail

it resides in /Users//.gnupg

Apples search feature integrated in the finder doesn't look through the
dot directories... Just in case you need it again.

> and then saw that you just
> released v2.1.8. After installing it, everything works again without any
> problems.

Good to hear!

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Enigmail sometimes fails to protect PGP/MIME headers

2017-01-20 Thread Ludwig Hügelschäfer
On 19.01.17 20:34, Anthony Papillion wrote:
> On 1/19/2017 1:10 PM, Ludwig Hügelschäfer wrote:

(...)

>> Sorry to ask such a stupid question, but by which means do you detect
>> that the headers are encrypted or not?
>>
> 
> Hi Ludwig,
> 
> Mostly by looking at the message in my inbox PRIOR TO decrypting the
> mail for the first time. So, for example, I will open my inbox and see a
> subject like
> 
> "How goes the day"
> 
> and when I click on it, I am prompted for my GPG password. At first, I
> thought that maybe the headers WERE encrypted and I was seeing them
> being decrypted without noticing. However, I've had someone send me an
> encrypted message with protected headers to a system that did not have
> GPG installed and I could still easily read the subject.

Please verify that these messages are really PGP/MIME messages and not
in inline format.

Thanks

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Enigmail sometimes fails to protect PGP/MIME headers

2017-01-19 Thread Ludwig Hügelschäfer
Hi Anthony,

On 19.01.17 18:13, Anthony Papillion wrote:
> On 1/19/2017 10:56 AM, Patrick Brunschwig wrote:

(...)

>> I don't fully understand what you mean with a Windows 7 system. Does it
>> happen for mails that you sent out, or mails that you received?
> 
> It actually happens both. There have been several piece of mail I've
> sent that have had the body properly encrypted but the headers are
> unprotected and several I have received with the same issue.

Sorry to ask such a stupid question, but by which means do you detect
that the headers are encrypted or not?

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Thunderbird and Enigmail on multiple computers?

2017-01-19 Thread Ludwig Hügelschäfer
Hi Paul,

On 18.01.17 23:59, p...@artisticslate.com wrote:
> Robert,
> 
> I have copied over the .gnupg folder and contents (and removed the
> random_seed file), but when I go to the Account Settings on my laptop
> and click into OpenPGP Security I do not see the key from my desktop.
> Is there some additional step needed to get Thunderbird to re-read that
> folder?
> Also, under Enigmail Key Management the keys from the desktop do not
> show up.

Is "Display all Keys by Default" checked?

Restarting Thunderbird is not necessary after key relevant actions
outside of Enigmail. Just open Enigmails key management and reload the
key cache (File -> Reload key cache).

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] [SPAM] enigmail-users Digest, Vol 54, Issue 14

2017-01-17 Thread Ludwig Hügelschäfer
Hi,

On 17.01.17 20:21, Dominik Kucher wrote:
> On my Thunderbird with enigmail, at home it believes my signature is
> good but at work on my Thunderbird with enigmal it believes it broken. why?

A broken signature shows that the content (signed content or the
signature) was modified between the sending process and the receiving
process. You cannot say which part if you cannot compare the sent
original and the received copy.

If, however, you receive on different ends, and only one copy didn't
verify correctly, this proves that the disturbance was on the way to
only this special receiving end.

A typical disturbance breaking the signature could be a folded line in
the message text.

Inline PGP format is usually much more vulnerable, PGP/MIME format
provides more resistance against this problem.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Keys not showing up in Enigmail setup wizard

2017-01-14 Thread Ludwig Hügelschäfer
Hi,

On 14.01.17 05:17, Daniel P. Brown wrote:
> Hello,
> 
> I'm trying to configure Enigmail on Icedove within Tails OS. My keys
> show up in the Enigmail Key Manager, but when I'm going through the
> setup wizard, I choose the second option (experienced users setup)
> because I already have keys I want to import. I select the keys when
> prompted, but when I go to the page for "Key Selection - Create A Key to
> Sign and Encrypt Email" none of my keys show up.

Your keys may not have the right "ownertrust" setting after importing
them. Please first go to the Enigmail key management, select your key
pair (it's showing up in bold, does it?) and select Edit -> Set Owner
Trust. A dialog pops up. Please select "I trust ultimately", as this is
your key pair and you certainly trust your own signature :-)

> I should note that I messed with the OpenPGP settings in Icedove itself
> and enabled encryption using my keys and when I opened this email to
> draft it, the encryption settings were there.

That probably doesn't hurt you.

HTH

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Typo in pt_PT

2017-01-12 Thread Ludwig Hügelschäfer
Hello Marco,

On 12.01.17 17:56, Marco A.G.Pinto wrote:
> Hello!
> 
> I was just opening an e-mail in my other computer where I have
> Thunderbird in pt_PT and it said:
> "Parte da mensagem assinado com chave desconhecida; premir o botão
> 'importar chave' para transferir a chave blah blah"
> 
> "assinado" should be "assinada" (feminine).
> 
> Just my two cents.

Thanks for this hint. However, the translations of Enigmail are kept on
http://beta.babelzilla.org/projects/p/Enigmail/ where they are
contributed by volunteers. If you want to be part of these volunteer
translators, you can register there and contribute.

Thanks again!

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Fwd: Editing Enigmail Menu

2017-01-07 Thread Ludwig Hügelschäfer
Hi,

On 06.01.17 20:07, gehrig wrote:
> Is it possible to edit the Enigmail -->Decrypt to Folder menu?
>
> I would like to decrypt all my emails to the Local Folders Inbox only.
>
> I decrypted some emails in the beginning to some wrong places.
> Now those places are in the menu, and I would like to delete them.

You already received an answer. If you didn't receive it for whatever
reason, you can read it in the archives:

https://admin.hostpoint.ch/pipermail/enigmail-users_enigmail.net/2017-January/004249.html

HTH

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Enigmail asks for password for old key

2016-12-31 Thread Ludwig Hügelschäfer
On 30.12.16 13:10, Pedro Ribeiro wrote:

> I used to have a per-recipient rule for myself, but deleted it and I've
> tried with and without it.  My gpg.conf did not exist before I added the
> default-key directive.
> 
> I only have one identify for this account, and he new
> key is specified in the Thunderbird -> OpenPGP Security account
> settings. Enigmail is set to use convenient encryption settings.
> 
> My gpg-agent.conf says this:
> ###+++--- GPGConf ---+++###
> default-cache-ttl 600
> max-cache-ttl 6000
> 
> But the PIN still doesn't get cached...

I think we have to debug one level deeper. Which OS are you running?
Which version of Enigmail and GnuPG? Do you have a parallel install of
GnuPG v1 and GnuPG v2? Are there two gpg-agent processes running under
different users?

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Enigmail asks for password for old key

2016-12-29 Thread Ludwig Hügelschäfer
Hi,

On 30.12.16 03:52, Pedro Ribeiro wrote:

> Hi Ludwig,
> 
> I've added a default-key directive to my gpg.conf and got it working.

Enigmail does not need any of those directives in gpg.conf to work
properly. The other way round: they lead to problems if you e.g. change
keys and forget about old entries in gpg.conf.

If you ADD such an entry in gpg.conf and it fixes things for you shows
that something is misconfigured in your Enigmail setup. So, if you don't
mind, I'll ask the other two questions again:

Do you have a per-recipient-rule for your email address? Did you specify
the new key in account settings?

And another one: Did you specify the new key for all identities of the
account(s) configured to use with Enigmail?

Ludwig





signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Enigmail asks for password for old key

2016-12-29 Thread Ludwig Hügelschäfer
Hi,

On 29.12.16 17:26, Pedro Ribeiro wrote:
> Hi,
> 
> I've just set up my OpenPGP smart card with key stubs, and revoked my
> old private key.
> When sending an email message to myself, Enigmail correctly asks for the
> PIN for the card, signs / encrypts the message and sends it.

So it uses the new key on the smartcard for signing...

> When I try to decrypt it, instead of asking for the PIN for the card, it
> asks me for the password of the old, revoked key. If I click cancel, it
> just falls through without decrypting the message or asking for the card
> PIN.

... and the old revoked key for encryption.

> Any ideas what might be happening here?

Do you have a per-recipient-rule for your email address? Did you specify
the new key in account settings? Do you have one or more of these
instructions in your gpg.conf file?

encrypt-to
default-key
local-user

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Do not use short fingerprints

2016-12-17 Thread Ludwig Hügelschäfer
On 17.12.16 10:01, vv01f wrote:
> On 17.12.2016 09:52, Nico wrote:
>> But there is no way for me to check the full fingerprint. I first need
>> to import/download the key and then i can validate it. If it would be
>> shown directly with the full length, that'd be simpler and more secure.
>> Another option would be to add a hover text with the full fingerprint.
> 
> There is no such problem:
> 
> https://pgp.mit.edu/pks/lookup?search=0x48B660CA&op=index&fingerprint=on
> 
> just tell you want to knwo the fingerprint and the keyserver might tell
> you. and later after import check another time, as the connection could
> have been intercepted (X.509 and/or TLS aint perfect as well).

This is a practicable workaround.

But: Enigmail claims to be a comprehensive user interface. As such, we
should display at least the long key-Id or better the fingerprint
instead of the short prior to importing.

https://sourceforge.net/p/enigmail/bugs/316/

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Enigmail - can't view my private code

2016-12-05 Thread Ludwig Hügelschäfer
Hi Phil,

On 05.12.16 20:44, Phil Chubb wrote:
> I'm new to Enigmail.  I've apparently installed it correctly in
> Thunderbird  (45 I think - latest version) , created public and private
> keys, etc. but nothing shows up in the key management window or
> the private key side of GPA key manager and when I try and open the
> secring file via GPA, nothing shows up again.  There's apparently 6 kb
> in the file but I can't read it.  Very frustrating.  Is my private
> key really there and if so, is there any other way I can find out what
> it is?

Did you check the "Display all Keys by Default" in Enigmails key manager?

Can't speak about GPA, though.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Help

2016-11-28 Thread Ludwig Hügelschäfer
On 27.11.16 23:30, gehrig wrote:
> Ludwig Hügelschäfer, The emails are coming from different places. They
> go to my Countermail.com email. When they get to my Thunderbird program,
> they decript as plain text with html code printed on the page. I tried
> to change the message body from HTML Original to HTML Simple, no change.
> However, if I change to plain text, the message is displayed, if there
> are no pictures. If there are pictures, they are converted to URLs.
> Thanks for your reply, gehrig

This sounds as if the content-type is wrong. Can you please display the
message source (CTRL-U on Windows) and search for lines beginning with
Content-Type

There should be a line like:

Content-Type: text/html;

If you have multiple lines beginning with "Content-Type", then we would
need to see the MIME structure. The best way to analyze would be to
forward such a message as attachment(!) to me. No worries, I cannot
decrypt it, nor would I publish confidential details.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Help

2016-11-27 Thread Ludwig Hügelschäfer
Hi,

On 26.11.16 19:08, gehrig wrote:
> Good Morning,
> 
> I have gpg4win-2.3.3 and enigmail 1.9.6.1 running on Thunderbird 45.5.0 -
> 
> I am receiving HTML emails, but when unencrypted, display as plain text
> with all the HTML code, rather than a readable email.
> 
> Can you help me?

This sounds like a problem on the sending end. Which mail program was
used when sending the problematic messages?

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] [ENIGMAIL-1.9-BRANCH PATCH] keep options distinct

2016-10-28 Thread Ludwig Hügelschäfer
On 27.10.16 21:00, Ludwig Hügelschäfer wrote:
> Hi,
> 
> On 27.10.16 20:13, Daniel Kahn Gillmor wrote:
> 
>> Any suggestions for what to debug next?
> 
> I suppose there's nothing related in the Thunderbird error console,
> right? Enigmail master runs an import from file flawlessly. I'll compare
> master and enigmail-1.9-branch.

Just tested: enigmail-1.9-branch imports a key from file as well as
master here.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] [ENIGMAIL-1.9-BRANCH PATCH] keep options distinct

2016-10-27 Thread Ludwig Hügelschäfer
Hi,

On 27.10.16 20:13, Daniel Kahn Gillmor wrote:

> Any suggestions for what to debug next?

I suppose there's nothing related in the Thunderbird error console,
right? Enigmail master runs an import from file flawlessly. I'll compare
master and enigmail-1.9-branch.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] add on is not verified by firefox

2016-10-15 Thread Ludwig Hügelschäfer
On 14.10.16 23:53, Datse Multimedia Information wrote:
> Actually that isn't exactly an impertinent question.  It could sound
> like it, because the package format is the same for Firefox as it is
> for Thunderbird, and if you use Firefox to try to download a
> Thunderbird add-on, it has a nasty habit of trying to install it into
> Firefox.  I would say more of an "annoying feature" than a bug, but
> it could explain what happened.

Yes, that will happen when you try to install the Enigmail XPI in a
current (49.0.1) firefox.

But: The package format clearly specifies which Mozilla platforms the
.XPI is compatible with. I consider it a bug of Firefox not to clarify
the platform conformity before checking the presence and validity of the
signature. A good error handling would present the user with the following:

/
| Hey, I have detected two problems when trying to install the XPI
| (filename):
|
| 1. It is not compatible with FF xx, but only with TB (version range)
| and SM (version range)
|
| 2. It is not verified (misses an internal signature by $CA).
|
\

That should even fit on a smartphone screen.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] how do I get an old PGP key back after a new one has been generated?

2016-10-03 Thread Ludwig Hügelschäfer
On 01.10.16 18:50, Olav Seyfarth wrote:
> Hi Susan,
> 
>> Does it matter how I save it on my old computer?
> 
> it should not, but to make sure, please upgrade enigmail on both
> computers to the current version, then export, transfer and import.
> 
> If that doesn't work out, please report back with some logging (which
> can be enabled in Enigmail preferences, you may need to enable expert
> settings there to see the debugging tab). After enabling logging,
> restart Enigmail, then do the import and avvess log in
> Enigmail->debugging, you may save it there. Prior to posting your log
> publicly, make sure to sanitize sensitive data, or send it to one of us
> (Patrick, Ludwig, me) directly.

Susan, did you solve your problem already? If not, you may install a
nightly version of Enigmail
(http://enigmail.net/index.php/en/download/nightly-build), where we
added additional debug outputs when failing to import a settings file.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Fwd: Enigmail Error/Bug/Problem

2016-10-02 Thread Ludwig Hügelschäfer
On 02.10.16 15:59, Ludwig Hügelschäfer wrote:
> Hi,
> 
> On 02.10.16 14:19, Rabea Seyboldt wrote:
>> [Exception... "Cannot modify properties of a WrappedNative"
>> nsresult: "0x80570034 (NS_ERROR_XPC_CANT_MODIFY_PROP_ON_WN)"
>> location: "JS frame :: resource://enigmail/mimeDecrypt.jsm ::
>> EnigmailMimeDecrypt.prototype.returnData :: line 442"  data: no]
> 
> This is probably the culprit.

Oh, Patrick was faster and - as always - more specific :-)

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Fwd: Enigmail Error/Bug/Problem

2016-10-02 Thread Ludwig Hügelschäfer
Hi,

On 02.10.16 14:19, Rabea Seyboldt wrote:
> [Exception... "Cannot modify properties of a WrappedNative"
> nsresult: "0x80570034 (NS_ERROR_XPC_CANT_MODIFY_PROP_ON_WN)"
> location: "JS frame :: resource://enigmail/mimeDecrypt.jsm ::
> EnigmailMimeDecrypt.prototype.returnData :: line 442"  data: no]

This is probably the culprit. Just to be sure: have you unchecked the
option in Enigmail preferences -> Advanced Tab -> "Only download
attachments when opened"?

You may have to enable "Display Expert Settings and Menus" in the
"Basic" tab to reach the "Advanced" tab.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] how do I get an old PGP key back after a new one has been generated?

2016-10-01 Thread Ludwig Hügelschäfer
Hi,

On 30.09.16 12:45, Susan Hawley wrote:
> Hi there
> 
> I recently had my Thunderbird moved from a PC to a Mac and in the
> process of installing enigmail on the Mac version of Thunderbird it
> generated a new PGP key. This means I cannot now access any of my old
> encrypted emails.
> 
> Do anyone know how I could reinstall my old PGP key?

Yes. Enigmail has an Backup and Restore feature. It not only transfers
keys, but also all settings. On the old machine, go to Enigmail ->
Preferences. Select the "Backup/Restore" Tab on the right. Push "Export
Settings and Keys". Select a file. You might be asked to enter the
passphrase of your private key(s).

Transfer this file to the new computer. There, go to Enigmail ->
Preferences. Select the "Backup/Restore" Tab on the right. Push "Restore
Settings and Keys". Select the transferred file. You're done.

You may have to select your old key pair to be used for your mail account.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] where can I find the passphrase?

2016-09-25 Thread Ludwig Hügelschäfer
On 26.09.16 05:38, Filippo Sollazzo wrote:
> Hello,
> 
> when opening my e mails I'm asked for the passphrase which can
> I find this again? Thanks in advance

You must enter the same passphrase you entered when you created your
key. If you don't know it any more, you cannot decrypt old contents any
more.

Regards

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Enigmail interferes with the display of s/mime signed messages

2016-09-11 Thread Ludwig Hügelschäfer
On 10.09.16 23:15, NoOp wrote:
> 
> Works with 1.9b1. Does not work with 1.9b2.

Good, that's a very small regression window. Thanks for testing! Could
you please send logs for these two?

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Separate pinentry for Enigmail

2016-09-10 Thread Ludwig Hügelschäfer
On 10.09.16 09:44, Patrick Brunschwig wrote:
> 
> I see a way how this could possibly be achieved, even though it may
> be a little complicated.
> 
> You could create a wrapper script that determines based on some
> logic (e.g. some environment variable) whether to open a graphical
> pinentry or pinentry-curses. The wrapper script would be configured
> in gpg-agent.conf as "pinentry-program". Key point: the wrapper
> script would need to exec the chosen pinentry programm (i.e. the real
> pinentry replaces the wrapper).

Brilliant idea, Patrick! Patrick Ziegler, please forget my overly
pessimistic response :-)

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Separate pinentry for Enigmail

2016-09-09 Thread Ludwig Hügelschäfer

On 09.09.16 15:50, Patrick Ziegler wrote:
> Hi there
> 
> I have a problem regarding Enigmail and pinentry. I know Enigmail
> only works w/ a window based pinentry (gtk, qt) but I also use
> gpg-agent for other things, like signing my git commits and I would
> like to use the ncurses based pinentry for that. Is there a way to
> tell enigmail (or gpg through enigmail) to use a certain pinentry
> method, while my gpg-agent uses pinentry-curses for everything else?

No, this is not possible in a reliable way. Gpg-agent is limited to one
version of pinentry per session. The used pinentry binary is either a
hardcoded version (depending on the build-configuration) or specified in
gpg-agent.conf. For your use-case you would have to kill and restart
gpg-agent with different contents of gpg-agent.conf depending on the
purpose it is being used right now. Who or which process would determine
this? You can see that this imposes practically insolvable obstacles.

You can ask on the gnupg-users mailing list for such a feature. Good luck!

> Thank you and best regards, Patrick

Sorry to give no better answer.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] REPLACE the eye-challenging gray text on website

2016-09-06 Thread Ludwig Hügelschäfer
Hi Olav (CCing),

On 06.09.16 20:26, Olav Seyfarth wrote:
> Hi List,
> 
>> On 09/04/2016 06:24 PM, Jim Wyman wrote ...
> 
> I'm confused: I did not get Jim's message. Was it sent to enigmail-
> users?

Yep.

> I only got no messages on 2016-09-04 from enigmail-users...

Better check the archive - there were mails from dkg and Patrick this
morning.

https://admin.hostpoint.ch/pipermail/enigmail-users_enigmail.net/

Maybe your provider has some issues?

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] REPLACE the eye-challenging gray text on website

2016-09-06 Thread Ludwig Hügelschäfer
Hi,

On 06.09.16 18:08, Doug Barton wrote:
> On 09/04/2016 06:24 PM, Jim Wyman wrote:
>> Please STOP using gray text on the white background on your website.
>> (...)
> 
> While I certainly agree with your sentiments, I'm not seeing grey text
> on the enigmail web site. Can you give some example URLs?

The only page which I can think of in this context is the FAQ
http://enigmail.net/index.php/en/faq?view=category&id=11 where we have
grey on white text.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Have to killall and relaunch gpg-agent after every reboot..

2016-09-02 Thread Ludwig Hügelschäfer
Hi,

On 02.09.16 20:55, acubene+enigm...@vivaldi.net wrote:
> My distribution only provides GnuPG 1.4.20-1
> https://launchpad.net/ubuntu/xenial/+source/gnupg

You need the gnupg2 package:
https://launchpad.net/ubuntu/xenial/+source/gnupg2

> Not even the GnuPG classic 1.4.21 available on gnupg.org

Linux packages often have backportes security patches from higher
versions of the same software. So ubuntu 1.4.20-1 may have the same
content as 1.4.21 from source.

Ubuntu uses the debian package system and the debian maintainer of the
gnupg packages really does a good job :-)

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Have to killall and relaunch gpg-agent after every reboot..

2016-09-02 Thread Ludwig Hügelschäfer
Hi,

On 02.09.16 19:23, acubene+enigm...@vivaldi.net wrote:
> I guess that packages in /usr/bin are from my distro and their
> configurations also.
> 
> Updated version of GnuPG is in /usr/local/bin
> 
> https://lists.gnupg.org/pipermail/gnupg-users/2015-January/052134.html

One should never keep Distro and self-built versions of the same
software in locations accessible by the PATH environment. Distro
packages can be removed and readded easily by your package manager.

Self built versions can either be renamed and/or moved to another
directory or deleted and reinstalled by "make install".

Ludwig

BTW: Please trim your quotes.




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Have to killall and relaunch gpg-agent after every reboot..

2016-09-01 Thread Ludwig Hügelschäfer
On 01.09.16 21:25, acubene+enigm...@vivaldi.net wrote:

> (...)
> If I simply relaunch gpg-agent (without "--debug-level expert
> --use-standard-socket --daemon /bin/sh") Enigmail still doesn't work.

Some days another user had the same problem on Ubuntu 16.04. He solved
it by starting over with a completely new .gnupg directory (and of
course transferring keys and trust).

> Trying to add "use-standard-socket" to $HOME/.gnupg/gpg-agent.conf
> didn't make it (obsolete option...)
> 
> Any idea ?

Try to remove everything in gpg.conf and gpg-agent.conf except all
entries which are absolutely necessary.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] FAQ / Enigmail Gpg2 and "Missing passphrase" "No secret key" error

2016-09-01 Thread Ludwig Hügelschäfer
On 01.09.16 14:42, Guillaume MULLER wrote:

(...)

> I'm not sure if I made a mistake when switching from gpg to gpg2, or
> if it is a bug in gpg2, or if there was a tool in enigmail to switch
> to gpg2, which forgot to export/import the secret keys, but I think
> it would save a lot of time to other people like me if you would
> mention the problem/solution in your FAQ!

gpg1.x and gpg2.x should be able to operate on the _same_ keyrings.
Which versions of gpg1.x and gpg2.x are you using exactly?

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] qualifizierte elektronische Signatur

2016-09-01 Thread Ludwig Hügelschäfer
Hi,

On 01.09.16 14:14, Frederik Pascal Genreith wrote:
> Sehr geehrte Damen und Herren,

We're not so formal here on this mailing list ;-) And we're speaking in
english.

> ich versuche eine qualifizierte elektronische Signatur (QES) nach SigG
> in meine E-Mails einzubinden.
> Da ich bei Ihrem Thunderbird Add-On auch den Reiter "SmartCard" gefunden
> habe, stellt sich mir die Frage, ob Sie QES unterstützen. Wenn ja,
> benötige ich eine klassische Signaturkarte oder akzeptieren Sie auch den
> aktivierten nPA?

Well, Enigmail supports the OpenPGP standard using GnuPG as the
crypographic backend. I don't think GnuPG supports QES as it seems to
require specialized hardware and/or tokens. Your question is better
suited for a GnuPG users mailing list, either international at
gnupg-us...@gnupg.org, or, if you prefer german: gnupg...@gnupg.org

HTH

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] pinentry trouble

2016-08-27 Thread Ludwig Hügelschäfer
Hi,

On 27.08.16 07:54, Bitcoin Admin wrote:
> 
> Hello, i hope for some help:

(...)

> After a restart later same problem came back (no pinentry)
> 
> So,when debugging gpg-agent is turned on i can decrypt :-), if turned
> off -> NO!
> 
> Somebody has an idea?
> 
> If necessary i can repeat the debugging process and post the output here.

If it works with the debug option in the background, this will probably
not help too much.

In the non-working situation: Open up Thunderbird. Try to open an
encrypted mail. Open Enigmails Debug log by going to Enigmail menu ->
Debugging options -> View Log. Save the log file.

Then either post it here, but please obfuscate personal information
beforehand or send it encrypted to ludwig at enigmail dot net and
patrick at enigmail dot net.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Problems with sorting messages encrypted with Memory Hole standard

2016-08-08 Thread Ludwig Hügelschäfer
On 08.08.16 21:51, Valentin wrote:
> Hi,
> 
> I usually sort my mails as threaded view in Thunderbird (I use an addon
> called ThreadKey[1] but I think it's possible via about:config too).

Thunderbird provides a threaded view out of the box.

> One of my contacts writes me encrypted mails with (I guess) the Memory Hole
> feature[2].


> When I receive a new (encrypted) mail, its subject is "Encrypted
> message" (like intended). Then I decrypt it and its "real" subject takes
> place. Since this subject stays there after my key gets locked, I assume
> the decrypted subject gets cached(?).
> 
> However, Thunderbird doesn't recognize mails with encrypted subjects to
> belong together.

It uses the "References" header. If your partners mail doesn't provide
one, Thunderbird can't sort it in threaded view. The "Subject" header is
NOT used for constructing the threaded view.

Just look at the message source (CTRL-U on windows and Linux) and search
for the References header.

HTH

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] 64-bit key IDs

2016-07-25 Thread Ludwig Hügelschäfer
On 25.07.16 19:04, Marco A.G.Pinto wrote:
> 
> Sorry what I meant was that the person in the mailing list had the
> key ID just like I have in the bottom of my message, but I have there
> only 32-bits and he had 64-bits.

You can do this very easily yourself: The long (64bit) key-Id consists
of the last 16 hex digits of your fingerprint. Just as the short (32bit)
key-Id is the last 8 hex digits of the fingerprint.

HTH

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Got a question

2016-07-24 Thread Ludwig Hügelschäfer
Hi Ian,

On 24.07.16 10:50, Ian Mann wrote:
> On 24.07.16 10:49, Ian Mann wrote:
>> On 24/07/2016 18:43, Ludwig Hügelschäfer wrote:
>>> You can do this manually instead. Fetch
>>> https://files.gpg4win.org/gpg4win-vanilla-2.3.2.exe and start it.
>> 
>> How do you find out which gpg4win you have currently installed?
>
> Found the answer

Would you please share it? Thanks!

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Got a question

2016-07-24 Thread Ludwig Hügelschäfer
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Hi Monica,

On 24.07.16 02:07, Monica Smith wrote:
> *I had downloaded enigmail for my program "Mozilla Thunderbird".
> 
> I just opened an email, so I followed the "Setup wizard"
> 
> I also clicked the "Setup Wizard"
> 
> So I clicked Start up Now...
> 
> I also clicked "I prefer a standard configuration"
> 
> So I let it do it's thing but that was more than an hour or 2 and
> no progress (like the pic below)
> 
> What am I doing wrong?  I'm new at this.

You didn't do anything wrong. The Enigmail Setup wizard couldn't
download the necessary GnuPG package - for unkonwn reasons.

You can do this manually instead. Fetch
https://files.gpg4win.org/gpg4win-vanilla-2.3.2.exe and start it.

After that, please restart the Enigmail setup wizard - it will detect
the existing GnuPG installation and use it automatically.

Hope this helps!

Ludwig


-BEGIN PGP SIGNATURE-
Version: GnuPG v2
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=sQrF
-END PGP SIGNATURE-

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Télécharger GnuPG pour Enigmail ?

2016-07-16 Thread Ludwig Hügelschäfer
On 16.07.16 23:16, Samir Nassar wrote:
> On Sa, 2016-07-16 at 22:02 +0200, John Dose wrote:
>> Le grenouille doivent chasser le mosleman... et ne perde pas du temps
>> avec technology encryption que en france seulement est utilisee de
>> terroristes :-)
> 
> Translation: "The frog must expel the Muslim ... and do not waste time
> with encryption technology that is used in France only by terrorists"
> 
> Is this kind of language acceptable on this mailing list? 

No, it is not, absolutely not. Please stick to politeness and respect.

To cite Phil Zimmerman: "If privacy is outlawed, only outlaws will have
privacy".

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Unverified signatures and mailing lists

2016-06-22 Thread Ludwig Hügelschäfer
On 23.06.16 01:39, Duncan Guthrie wrote:
> Dear Enigmail users,
> When I send messages to mailing lists, they have started to become
> 'unverified'. When I send the email and sign it, in my 'sent' folder
> the signature is good. However, when the mailing list receives it, the
> signature is unverified.
> Has anyone ever had similar problems, and if so, how do I fix it? I
> have begun to suspect that this may be due to the protocol being
> PGP/MIME, this producing a bad signature when processed by the mailing
> list software,

Mailman (a mailing list software) in earlier versions had problems with
PGP/MIME signatures. This list is using version 2.1.20 which is known to
work. Can't talk about other software.

> so would using inline PGP be the way forward?

If your list(s) are using mailman, you could persuade the administrator
to upgrade. If it's using other software, inline signatures may be the
way to go.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Install GNUPG

2016-06-21 Thread Ludwig Hügelschäfer
Hi,

On 21.06.16 09:07, Jp wrote:

> Hello,
> 
>   I am having trouble installing GNUPG, I install the suite from
> gpgtools.org and enigmail does not see it!

what happens when you open a Terminal application window and type

gpg2 --version

Please report the output.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Long lines in signed mails - When are they a problem?

2016-06-09 Thread Ludwig Hügelschäfer
On 10.06.16 00:29, Hauke Westemeier wrote:
> 
> Hi,
> 
> I'm using Enigmail 1.9.2 with Thunderbird 45.1.1 (Windows). I'm
> sending my e-mails as plain text (no html) and use PGP/Inline (some of
> my contacts prefer it over PGP/MIME).
> 
> If my signed e-mail contains long unbreakable text lines (especially
> links) Enigmail prints a warning about them and I can choose between
> various options how to proceed. If I choose automatic line wrap, the
> links are being split up over several which is undesirable. Therefore
> I usually send them without changes but in the dialogue box enigmail
> warns about that this might result in a broken signature. At least if
> I look at the e-mails in my send box the signature looks always (I
> checked several dozed mails) OK and other people also verified the
> signature as correct. In which circumstances does the long lines
> result in a broken signature?

This may happen, when some mail servers add a line break within the long
line. This invalidates inline signatures.

> If Thunderbird changes the line wrap
> after signing I would see this when I look at the e-mail in my send
> folder, wouldn't I?

Yes, you would, but it isn't Thunderbird...

> How likely is it that a server on the way changes
> the line wrap?

Depends - some people have experienced this, some haven't.

> I would prefer if there would be a way to define the default choice
> (like it is for the handling of attachments).

Best choice is to use PGP/MIME - it doesn't have this problem. It's
always better to avoid problems than to find and optimize workarounds.
Which of your mail contacts cannot use PGP/MIME? Can you convince them
to use newer software which is PGP/MIME capable?

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Selective encryption in one message

2016-06-08 Thread Ludwig Hügelschäfer
On 08.06.16 11:16, Hakuch wrote:

> of course there is, just because there are mail providers I trust more
> than others

I don't think the big agencies have access to the disk at providers mail
servers. But you never know which line your TCP packets travel along.
You never know who's listening where. Before Snowden such a view was
regarded as paranoid, now it isn't any more.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Selective encryption in one message

2016-06-07 Thread Ludwig Hügelschäfer
Hi,

On 07.06.16 22:12, Hakuch wrote:

> On 03.06.2016 21:34, Patrick Brunschwig wrote:
>> On 03.06.16 09:46, Dr. Christian Madelung wrote:
>>> Good day,
>>>
>>> we have been using Enigmail for a number of years now. With more users
>>> being added, we encountered a challenge:
>>>
>>>   * you write a new email
>>>   * you have 3 addressee's where you have the PGP keys
>>>   * your main addressee is a client where you don't have a key
>>>
>>> Question: Can I send this email in one go - having the client receiving
>>> it un-encrypted, while the others receive it encrypted?
>>
>> Enigmail does not support this.
>
> thats a pity, is there no plan for supporting this?

Given the fact, that an unencrypted version of the mail is sent out,
there's little benefit in implementing this.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Rules for attaching public key

2016-06-01 Thread Ludwig Hügelschäfer
On 01.06.16 19:52, Daniel Kahn Gillmor wrote:

> I agree that keeping some state (or being able to infer state) about
> whether your peer likely has your key would be a useful thing.  I'm not
> sure what the right rules would be to make this relatively seamless and
> not-confusing, though.

One thing is clear: If the local installation has already received
encrypted mails from this address, it is no longer necessary to send the
own key again. Not sure how to implement this, this would require some
sort of mini-addressbook.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Question re Passphrase Change Problem

2016-05-25 Thread Ludwig Hügelschäfer
Hi John,

On 24.05.16 02:01, John Viola wrote:
> Hi All,
> 
> I am having a problem with my Enigmail plugin. I recent changed the
> passphrase, and now I am unable to use my key to encrypt, decrypt, sign,
> verify, or presumable any other function. When I try to display an
> encrypted message I get the error message:
> 
> “Error - no matching private/secret key found to decrypt message Public
> key B2CA681490A25ED5 needed to verify signature. gpg: decryption failed:
> secret key not available”
> 
> However, when I look in key management the correct key is in bold. When
> I try to sign a test email to myself I get the message:
> 
> “Send operation aborted. Error - bad passphrase”
> 
> Although I am not promted for my passphrase. This problem began
> immediately after I changed my passphrase and I have changed no other
> settings. I am running Enigmail version 1.7.2 (20140829-0917)
> 
> Any guidance or recommendations on this issue would be greatly appreciated.

You already got an answer to your identical forum post:
https://sourceforge.net/p/enigmail/forum/support/thread/79dede13/

Please do not double post in the forum and the mailing list. Just choose
one and stick to that place for discussion.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Improvement suggestion for per-recipient-rules

2016-05-16 Thread Ludwig Hügelschäfer
On 16.05.16 17:35, Max Lehmann wrote:
> I've got an idea for an improvement, but I can't create a sourceforge
> account, because of some strange error.

Which error do you get?


> It'd be nice if someone of you could add this to the issues.
>
> When editing per-recipient rules, there is the button "Select keys"
> under "Use the following OpenPGP keys:". At the moment, I have to select
> every single key when editing these, which is pretty annoying when
> having lots of keys. It would be much more convenient if the keys I
> chose the last time would still be selected.
> I hope this is understandable. If not, I'll explain it with some
> screenshots.

This sounds like https://sourceforge.net/p/enigmail/bugs/604/

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] My key can not be imported by others since v1.9.x

2016-05-12 Thread Ludwig Hügelschäfer
Hi,

On 12.05.16 11:25, digg...@openmailbox.org wrote:
> Halo
> 
> I have a GPG key with a sub and master keys.  There are two sets of sub
> keys one expired and one valid.   My master key is 8192 RSA  my subkeys
> are 4096
> 
> Since the release of enigmail 1.9 people can not import my key through
> the enigmail interface, it only works from command line with gpg --import.
> 
> If I do enigmail File Import from Key management it gives error and I do
> not see my key in key management even after refresh
> 
> "Error importing public key"
> 
> I see the errors in enigmail console
> 
>   enigmail> /usr/bin/gpg2 --charset utf-8 --display-charset utf-8
> --use-agent --batch --no-tty --status-fd 2 --import --trustdb
> /tmp/enigmail_import/trustdb --no-default-keyring --keyring
> /tmp/enigmail_import/keyring
>   gpg: keyring `/tmp/enigmail_import/keyring' created
>   gpg: /tmp/enigmail_import/trustdb: trustdb created
>   gpg: key : public key "diggler" imported
>   gpg: Total number processed: 1
>   gpg:   imported: 1  (RSA: 1)
>   gpg: no ultimately trusted keys found


Ok, gpg can import it successfully into the temporary keyring used to
provide a preview by Enigmail.

> My key looks like
> 
> gpg --list-keys 0x
> pub   8192R/0x 2012-03-24 [expires: 2020-03-25]
>   Key fingerprint =           
> uid [  full  ] diggler
> uid [  full  ] diggler 
> uid [  full  ] diggler 
> sub   4096R/0x 2016-03-13 [expires: 2018-03-12]
> sub   4096R/0x 2016-03-13 [expires: 2018-03-12]
> sub   4096R/0x 2016-03-13 [expires: 2018-03-12]

Ok, no key part is expired, which would trigger another pending issue...

> I have other contacts with keys set up exactly same as me key but with
> 4096 Master key and they all import OK.
> 
> 
> Can any one tell me how I might troubleshoot this further or fix the issue?

Could you please create a complete debug log file and send it to me?

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Problems updating to GnuPG 2.0 and Engimail 1.9.1

2016-05-01 Thread Ludwig Hügelschäfer
On 28.04.16 01:46, Hauke Westemeier wrote:

> (...)

> Why is actually a different key server ldap://keyserver.pgp.com used
> for the first key? As I said, I set keys.gnupg.net as only key server
> in the Enigmail settings and this server is used for all others but
> the first key.

To give an answer for all: The key in question has a "preferred
keyserver URL" set on a UID, so gpg looks there, and not at the given
location by the keyserver set in Enigmail preferences.

HTH

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] [ANN] Enigmail v1.9.2 available

2016-05-01 Thread Ludwig Hügelschäfer
On 01.05.16 09:12, Bernhard Kleine wrote:
> 
> Thank you for the new version. I have waited till today expecting it to
> update automatically. Update has not been visible therefore I downloaded
> the plugin and added it to thunderbirg. It would be nice if there would
> be an update check in the plugin.

The update process works via AMO
(https://addons.mozilla.org/de/thunderbird/addon/enigmail/). They still
have 1.9.1. Once the new version is reviewed and online, it will be
offered for upgrade for all.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] emails

2016-05-01 Thread Ludwig Hügelschäfer
Hi Annette,

On 30.04.16 16:47, annette breen wrote:
> I do not want to receive emails, thank you.
> 

Please read this:

> To unsubscribe or make changes to your subscription click here:
> https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

There you can unsubscribe yourself.

HTH

Ludwig





signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Enigmail interferes with the display of s/mime signed messages

2016-04-30 Thread Ludwig Hügelschäfer
Hi,

On 30.04.16 15:50, Klaus Merkel wrote:
> Hello list,
> 
> I've encountered a possible bug in the enigmail thunderbird addon. When
> the addon is enabled in thunderbird 45.0 it prohibits thunderbird from
> displaying s/mime signed messages. Is that a known behaviour? If yes is
> there a fix available?

Which version of Enigmail do you have installed? If it's not 1.9.2,
please upgrade. You are probably suffering from
https://sourceforge.net/p/enigmail/bugs/592/, fixed in 1.9.2.

Ludwig





signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Import of Key Fails

2016-04-30 Thread Ludwig Hügelschäfer
On 30.04.16 10:29, Hauke Westemeier wrote:
> 
> Hi Ludwig,
> 
>> Enigmail currently cannot import expired keys.
> 
> good to know but bad that there is no error message at all.
> 
> But actually I tried to import your public key. I took it from
> http://www.hammernoch.net/pgp/my_public_keys.asc

This one probably contains expired keys, so you can't use it right now
because of bug 602.

> Just a side question with some comments. Initially I  just typed the
> e-mail to you (using your @enigmail.net address) and said encrypt and
> then enigmail offered this nice screen where I can select the key to
> use but as I don't have it yet, I clicked on "Fehlende Schlüssel
> herunterladen" (download missing keys). I explicitly used
> keys.gnupg.net as key server. I got several hits, see here
> http://postimg.org/image/m7up6d6vl/ for a screenshot. If I understand
> it correctly in principle everybody can create keys for other peoples
> e-mail addresses or maybe you created all this different keys really
> yourself, therefore all these results. Some results are gray, I assume
> that these are expired keys (would revoken keys show up there as
> well?), unfortunately in this window there is no column for the
> expiration date or key validity. Maybe one can add it there (at least
> as an option to include).

Please take 0x00A1E6FE. This is the active production key. 0x048C4C64 is
an ECC key, only usable with GPG 2.1.

The grey ones are revoked and the others are expired.

> What I don't understand is, that one of the
> found keys is just labeld "undefined" and I can't see any details? How
> does this entry end up there?

The grey one is a miracle, at least for my understanding. Maybe this
artefact got created by a bug, either in Enigmail, gnupg or on the
keyservers, maybe during testing I do a lot for Enigmail.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Import of Key Fails

2016-04-30 Thread Ludwig Hügelschäfer
On 30.04.16 09:04, Ludwig Hügelschäfer wrote:

> Enigmail currently cannot import expired keys. This is a regression from
> 1.8.

I have created https://sourceforge.net/p/enigmail/bugs/602/ for this issue.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Import of Key Fails

2016-04-30 Thread Ludwig Hügelschäfer
Hi,

On 30.04.16 03:10, Hauke Westemeier wrote:

(...)

> The message "gpg: keine uneingeschränkt vertrauenswürdigen
> Schl├╝ssel gefun" translate to something like "no key completely trust
> able key found", I don't know if this refers to the temp file (with
> just the new imported key)

Yes, this refers to the temp-keyring.

(...)
> How can I solve this issue because not being able to import keys is
> quite a limitation.

Enigmail currently cannot import expired keys. This is a regression from
1.8.

If you want to import expired keys until this bug is fixed, you must do
this on the command line, calling gpg:

gpg2 --import 

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Problems updating to GnuPG 2.0 and Engimail 1.9.1

2016-04-28 Thread Ludwig Hügelschäfer
Hi Hauke,

On 28.04.16 01:46, Hauke Westemeier wrote:

(...)

[--homedir doesn't work in gnupg 2.0]

> After I set the system variable
> GNUPGHOME D:\somehwere\gnupg
> it works for GnuPG 2.0. As far as I can see this issue is not yet
> mentioned in the "Resolving issues with GnuPG 2.x and gpg-agent"
> section in the FAQ.

Thanks for the hint!

> A third issue that I don't understand yet is that I get errors if I
> update some keys from the key servers (others are working). To have
> less "random" results (depending on which server is chosen from the
> default pool) I explicitly set
> keys.gnupg.net
> as key server. If I choose to update one single key, for some of them
> the error log states the following (sorry that it is in German, the
> Umlaute are also wrong in the displayed text and some final letters
> seem to be missing as well. I don't know if this is an issue of GnuPG
> or Enigmail)
> 
> Herunterladen der Schlüssel ist fehlgeschlagen
> gpg: fordere Schl]ssel BB1D9F6D von hkp-Server keys.gnupg.net a
> gpg: Hinweis: Signaturen mit dem MD5 Hashverfahren werden zur]ckgewiesen
> gpg: Schl]ssel BB1D9F6D: Keine g]ltigen User-I
> gpg: dies k├Ânnte durch fehlende Eigenbeglaubigung verursacht worden
> sei gpg: Anzahl insgesamt bearbeiteter Schl]ssel:
> gpg: ohne User-ID: 1
> 
> The key in this example is actually one of the keys of the Heise
> Kryptkampagne
> https://www.heise.de/security/dienste/PGP-Schluessel-der-c-t-CA-473386.html
> and is marked as "Ungültig" (which translatets to "Invalid" but is
> different to "Abgelaufen" ("Expired")) in the Enigmail key manager. Is
> this related to the rejection of old (md5?) keys or what could explain
> this category? I'm not 100% sure but I think this was not like this in
> gpg 1.4.

Newer versions of gpg2.x reject signatures using the unsecure hash
algorithm MD5. If all self-signatures are stripped off this way, then
gpg rejects the whole key because of a missing self signature.

Maybe this can be repaired by the key owner by issueing a newer self
signature using a newer hash algorithm. However, this can only be done
for V4 keys.

Keys like this are old, usually almost 20 years, and are in V3 format
(which will no longer be supported in GnuPG 2.1) and typically have a
key length of 1024 bits, altogether indications that the key is
end-of-life. The owner should be generating a new key pair.

> If I choose to update all keys ("Keyserver - Update all keys" or some
> similar wording) I run into yet an other issue
> 
> Herunterladen der Schlüssel ist fehlgeschlagen
> gpg: Hinweis: Signaturen mit dem MD5 Hashverfahren werden zur]ckgewiesen
> gpg: fordere Schl]ssel F0D6B1E0 von ldap-Server keyserver.pgp.com a
> gpg: Keine g]ltigen OpenPGP-Daten gefunden
> gpg: Anzahl insgesamt bearbeiteter Schl]ssel:
> gpg: Schl]sselserver-Daten]bertragunsfehler: Nicht gefund
> gpg: Schl├╝sselserver-Daten├╝bertragunsfehler: Fehlerhafter
> ├Âffentlicher Schl├╝
> gpg: WARNUNG: Schl├╝ssel F0D6B1E0 kann per ldap://keyserver.pgp.com
> nicht aktualisiert werden: Fehlerhafter ├Âffentlicher Schl├╝s
> gpg: 20 Schl]ssel werden per hkp://keys.gnupg.net aktualisier
> gpg: fordere Schl]ssel 8ABDF3D7 von hkp-Server keys.gnupg.net a
> 
> 
> Why is actually a different key server ldap://keyserver.pgp.com used
> for the first key? As I said, I set keys.gnupg.net as only key server
> in the Enigmail settings and this server is used for all others but
> the first key.

Please create a debug log file for a "refresh all". Instructions for
this see here:
https://enigmail.net/index.php/en/faq?view=category&id=11#faqLink_6

Please either obfuscate personal information before posting here or send
an encrypted mail to me.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Key generations

2016-04-22 Thread Ludwig Hügelschäfer
Hi,

On 22.04.16 06:14, Olusegun wrote:
> Hello,
> 
> I came across your software with Mozilla Thunderbird and I will love to
> use it. While doing set up, it was about to generate both public and
> private keys... but it was just there for a long time. i did it again,
> it was the same. So I have not be able to use it.

Sorry to hear that. The observed long or hanging key generation might be
caused by a slow machine, a machine running out of entropy (like a
virtual machine), or it might be due to a bug.

In order to separate the reason, we need more infomation; could you
please report the following:

- Machine (just whether it's new or older than lets say 5 years),
- Virtual or real machine
- Operating system
- Enigmail version
- GnuPG version

Thanks!

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


Re: [Enigmail] Thunderbird update - gnupg and gnupg2

2016-03-23 Thread Ludwig Hügelschäfer
On 23.03.16 18:19, Kevin McGuinness wrote:

> EnigmailAgentPath=/usr/lib/gnupg2/gpg-protect-tool

Enigmail is using the wrong command. Did you select the command
manually? If yes, please deselect the checkbox "Override with" at
Enigmail -> Preferences, Basic tab.

Enigmail is quite smart in detecting the right gpg command.

I'm quite convinced that you can view your keys again when this issue is
fixed.

Ludwig




signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net


  1   2   3   4   >