Daniel Kahn Gillmor wrote on 08/10/2017 11:18 PM:
> Hi D.R.--
> On Thu 2017-08-10 08:16:02 -0600, D. R. Evans wrote:
>> On 64-bit jessie, updating to the current officially supported versions of
>> thunderbird/iceweasel (version and enigmail, the enigmail portion
>> (version is unusable because it requires gnupg 2.0.7, whereas 
>> the
>> version in the jessie repository is 1.4.18. See screenshot at
>> https://www.dropbox.com/s/6s3z6jy5ns3z9qd/gnupg1.png?dl=0.
>> The only solution appears to be to downgrade thunderbird/iceweasel and 
>> enigmail
>> to the prior working versions.
>  [...]
>> Versions of packages enigmail depends on:
>> ii  gnupg                  1.4.18-7+deb8u3
>> ii  gnupg2                 2.0.26-6+deb8u1
>> ii  icedove                1:45.8.0-3~deb8u1
>> ii  libc6                  2.19-18+deb8u10
>> ii  thunderbird [icedove]  1:45.8.0-3~deb8u1
>> Versions of packages enigmail recommends:
>> ii  gnupg-agent                   2.0.26-6+deb8u1
>> ii  gnupg2                        2.0.26-6+deb8u1
>> ii  pinentry-gtk2 [pinentry-x11]  0.8.3-2
> It looks to me like you have gnupg2 2.0.26 installed.  enigmail should
> find that automatically if you haven't explicitly overridden its path to
> gpg.

Before answering, I should make a positive assertion that, as far as I know,
apart from support for ZFS (which is obviously unrelated to this issue) I
believe that everything on this machine is exactly as-installed by synaptic
from the official jessie repositories. FWIW, I too saw in the bug report that
gnupg2 was installed; something else must have installed that at some point.
Nothing in my notes says that I ever installed it explicitly. (I did install
gnupg explicitly, several major versions of debian ago.)

Now, to your question:

> Do you have a path set explicitly in enigmail's configuration?

The Basic Settings screen of enigmail says:
  Gnupg was found in /usr/bin/gpg

The Override box ix checked, but it points to the same file.

I do see that there is also a /usr/bin/gpg2 file installed (presumably from

> Also, do you have gnome-keyring installed?  

Apparently, the answer is Yes". As with gnupg2, I did not install it
explicitly (and I don't use, and never have used, gnome on this or any other
mabchine) so something else must have installed it.

> is it configured to
> masquerade as gpg-agent?  if so, you might want to disable that. 

I'm not sure. Typing "gnome-keyring" produces:
[HN:radio] gnome-keyring
usage: gnome-keyring command [options]
commands: certificate-exception

so it's not obvious how to see the configuration details.

Anyway, given the above facts, I changed the enigmail configuration so that it
pointed to /usr/bin/gnupg2 instead of /usr/bin/gnupg. Apparently, this change
requires leaving and reinvoking thunderbird for it to take effect, but once I
realised that, enigmail began to work correctly.

So the problem is solved here, although perhaps enigmail in debian should be
changed to use /usr/bin/gnupg2 if it's installed, especially if gnupg is not
an adequate version.

Thank you very much for your help.


Web:  http://enginehousebooks.com/drevans

Attachment: signature.asc
Description: OpenPGP digital signature

Pkg-mozext-maintainers mailing list

Reply via email to