On 2015-11-28 12:59:18 (+0530), Benny Kjær Nielsen <[email protected]> wrote:
On 28 Nov 2015, at 8:17, Philip Paeps wrote:
I just noticed that MailMate r5187 is not respecting my PGP uid->keyid mappings in Security.plist.
It was working for me last week.  Did something break? :)

Not intentionally.

😀

I've got a bunch of valid secret keys which are all valid and I've configured Security.plist to pick the correct one for my various email addresses:

    {
        map = (
            {
                address = "[email protected]";
                userID = "0x31AEB9B5FDBBCB0E";
            },
            {
    [...]

This morning I tried to sign a message from [email protected] and MailMate wants to use another key, not 0x31AEB9B5FDBBCB0E. I thought the problem might be related to the fact that 0x31AEB9B5FDBBCB0E is stored on a Yubikey smartcard (that sometimes confuses GnuPG), but GnuPG is happy to use the key:

[665] (philip@twoflower)...ation Support/MailMate% gpg --card-status
    Application ID ...: D2760001240102000006037039520000
    Version ..........: 2.0
    Manufacturer .....: Yubico
    Serial number ....: 03703952
    [...]
Signature key ....: F579 7FCB F1F1 4E2C 28A9 487B 7C62 BC47 76C9 F29E
          created ....: 2015-06-14 20:27:26
Encryption key....: D034 ACB7 65C9 A8A5 01A5 4F82 935D B834 3AF2 5C94
          created ....: 2015-06-14 20:27:48
Authentication key: 3BC4 6C0F DA40 B9AF 9FC6 C076 CFF6 3254 4136 DF54
          created ....: 2015-06-14 20:28:12
General key info..: pub 2048R/0x7C62BC4776C9F29E 2015-06-14 Philip Paeps <[email protected]>
    [...]

If you launch from a Terminal window then you can get some more details like this:

        defaults write com.freron.MailMate MmDebugSecurity -bool YES
        /Applications/MailMate.app/Contents/MacOS/MailMate

You can send me the output off list if it's still not working for you.

It looks like r5187 is not feeding the userID to the gpg --local-user command line option. It's just giving the address:

2015-11-28 13:34:44.734 MailMate[28147:1947364] Failed to connect (_messageView) outlet from (SFCertificateTrustPanel) to (NSTextField): missing setter or instance variable

This line turned up as soon as the main window opened. I'm doubt it's related to the problem, but I thought I'd keep it just in case.

    OpenPGP
gpg2 --no-verbose --batch --no-tty --openpgp --status-fd 2 --digest-algo SHA1 --textmode --armor --local-user "<[email protected]>" --detach-sign

Note the --local-user is not the userID from my Security.plist.

As an aside: is there a particular reason you're specifying SHA1 rather than allowing GnuPG to pick the algorithm (in my case, I've told it to prefer stronger ciphers in my $HOME/.gnupg/gpg.conf).

Input string (202): "Content-Type: text/plain\r\nContent-Transfer-Encoding: quoted-printable\r\n\r\ntesting testing testing\r\n\r\nPhilip\r\n\r\n-- =\r\n\r\nPhilip Paeps\r\nSenior Reality Engineer\r\nMinistry of Informati..."
     Command: #!/usr/bin/env bash
"$MM_GPG" --no-verbose --batch --no-tty --openpgp --status-fd 2 --digest-algo SHA1 --textmode --armor --local-user "<[email protected]>" --detach-sign

     Result: Failure
     Output string (0): ""
Detail: [GNUPG:] USERID_HINT BB5E2C462A0FA8B0 Philip Paeps <[email protected]> Detail: [GNUPG:] NEED_PASSPHRASE BB5E2C462A0FA8B0 BB5E2C462A0FA8B0 1 0
     Detail: gpg: cancelled by user
     Detail: [GNUPG:] MISSING_PASSPHRASE
     Detail: gpg: skipped "<[email protected]>": Operation cancelled
     Detail: [GNUPG:] INV_SGNR 0 <[email protected]>
     Detail: gpg: signing failed: Operation cancelled

I expected GnuPG to ask me for the PIN for the key on my smart card, not the passphrase for this other key. Which is what it did until I upgraded.

Thanks.

Philip

--
Philip Paeps
Senior Reality Engineer
Ministry of Information
_______________________________________________
mailmate mailing list
[email protected]
http://lists.freron.com/listinfo/mailmate

Reply via email to