Re: Enigmail
Patrick Brunschwig: > On 31.07.2019 00:36, David wrote: >> Andrew Gallagher: >>> On 30 Jul 2019, at 18:47, David wrote: Hello Stefan, I have three email accounts with their own keys - Enigmail does not support this - you have to have one key and that's it. >>> >>> That is simply not true. I used enigmail with multiple keys for years >>> without any issues. If you’re having issues configuring it, perhaps ask on >>> the enigmail list. >>> >>> A >>> >> >> I have done so - but have got no advice on the correct settings in >> Thunderbird or Enigmail. > > That's not true. I have asked you for more details on the Enigmail > mailing list. But instead of responding, you came here to ask the same > questions. > > As Enigmail uses GnuPG for any crypto-operations, I don't think that the > problem is in Enigmail, but in your setup. Feel free to answer my > questions on the Enigmail mailing list, and I'll continue to try to find > out what goes wrong. > > -Patrick > Hello Patrick, I did not approach this list for answers - I just asked if anyone knew of an alternative. I then got drawn in to what was the problem. People say "Oh your settings are wrong" But the FAIL to give the RIGHT SETTINGS!! And then go waffling on I have turned back the clock some 20 years - so have no settings to support further keys. Having said that - I would appreciate exactly what settings will work to enable me to sign with other emails and the public key associated with it and to be able to encrypt and sign with differing emails and keys. I want specific instructions - not moaning and groaning my settings are wrong and I don't know what I'm doing - that approach does not lead to a solution. Regards, David -- People Should Not Be Afraid Of Their Government - Their Government Should Be Afraid Of The People - When Injustice Becomes Law, REBELLION Becomes A DUTY! Join the Rebellion Today! The "Captain's B(L)og" https://gbenet.com signature.asc Description: OpenPGP digital signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Enigmail
On 31.07.2019 00:36, David wrote: > Andrew Gallagher: >> >>> On 30 Jul 2019, at 18:47, David wrote: >>> >>> Hello Stefan, >>> >>> I have three email accounts with their own keys - Enigmail does not >>> support this - you have to have one key and that's it. >> >> That is simply not true. I used enigmail with multiple keys for years >> without any issues. If you’re having issues configuring it, perhaps ask on >> the enigmail list. >> >> A >> > > I have done so - but have got no advice on the correct settings in > Thunderbird or Enigmail. That's not true. I have asked you for more details on the Enigmail mailing list. But instead of responding, you came here to ask the same questions. As Enigmail uses GnuPG for any crypto-operations, I don't think that the problem is in Enigmail, but in your setup. Feel free to answer my questions on the Enigmail mailing list, and I'll continue to try to find out what goes wrong. -Patrick ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Enigmail
> That's why I am considering other solutions. I have been with > Thunderbird and Enigmail for over 20 years with one key pair - This is simply not possible, as Enigmail didn't exist until 2001. (It took until about 2003 before it became really usable.) ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Enigmail
Ralph Seichter: > * da...@gbenet.com: > >> Enigmail will only work with ONE Key. >> It does not recognise any other key than the first key that was >> created. > > I use multiple keys with Enigmail and Thunderbird, and I have done so > for years. > >> You don't think perhaps can not think - your not too smart as to offer >> any solution. > > Right, try insulting people, that will surely get you far. :-) I owe you > exactly nothing. If you cannot figure it out yourself, try the Enigmail > mailing list. > > -Ralph > > ___ > Gnupg-users mailing list > Gnupg-users@gnupg.org > http://lists.gnupg.org/mailman/listinfo/gnupg-users > I have approached the Enigmail list (if you care to read all the emails) but have had no instructions or help in resolving matters - clearly some people wish to make conversations rather than offering practical help - this failure was what prompted me to look into other solutions. David -- People Should Not Be Afraid Of Their Government - Their Government Should Be Afraid Of The People - When Injustice Becomes Law, REBELLION Becomes A DUTY! Join the Rebellion Today! The "Captain's B(L)og" https://gbenet.com ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Enigmail
Andrew Gallagher: > >> On 30 Jul 2019, at 18:47, David wrote: >> >> Hello Stefan, >> >> I have three email accounts with their own keys - Enigmail does not >> support this - you have to have one key and that's it. > > That is simply not true. I used enigmail with multiple keys for years without > any issues. If you’re having issues configuring it, perhaps ask on the > enigmail list. > > A > I have done so - but have got no advice on the correct settings in Thunderbird or Enigmail. That's why I am considering other solutions. I have been with Thunderbird and Enigmail for over 20 years with one key pair - postmas...@gbenet.com Regards, David -- People Should Not Be Afraid Of Their Government - Their Government Should Be Afraid Of The People - When Injustice Becomes Law, REBELLION Becomes A DUTY! Join the Rebellion Today! The "Captain's B(L)og" https://gbenet.com ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Enigmail
* da...@gbenet.com: > Enigmail will only work with ONE Key. > It does not recognise any other key than the first key that was > created. I use multiple keys with Enigmail and Thunderbird, and I have done so for years. > You don't think perhaps can not think - your not too smart as to offer > any solution. Right, try insulting people, that will surely get you far. :-) I owe you exactly nothing. If you cannot figure it out yourself, try the Enigmail mailing list. -Ralph ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Enigmail
Stefan Claas via Gnupg-users: > David wrote: > > Hi David, > >> I have three email accounts with their own keys - Enigmail does not >> support this - you have to have one key and that's it. > > Ah, o.k. I never tried it, but it should be possible, with different > accounts and keys (hopefully). > >> Am downloading and installing claws mail now so hope it will import all >> my Thunderbird and Enigmail settings :) > > Claws-Mail is a different beast and I think this will not work. > > Regards > Stefan > Hi Stefan, It's all installed - with a main mail box. Am going to see if I can create four email accounts - hopefully not all as sub-accounts of the first one I created - I notice you can not change the name of this mail box :) I've yet to figure out how to use my keys. A learninng curve is in order but late at night 11.45pm!! Regards David -- People Should Not Be Afraid Of Their Government - Their Government Should Be Afraid Of The People - When Injustice Becomes Law, REBELLION Becomes A DUTY! Join the Rebellion Today! The "Captain's B(L)og" https://gbenet.com ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Enigmail
Ralph Seichter: > * da...@gbenet.com: > >> I have three email accounts with their own keys - Enigmail does not >> support this - you have to have one key and that's it. > > Nonsense! One can not only configure one PGP key per account (of which > there can be many), one can even configure one key per identity. Each > TB account can have multiplie identities; one of Thunderbird's killer > features as far as I am concerned. > > Why you would lambast Enigmail for a non-problem, caused by you not > configuring things properly, is beyond me. > > -Ralph > > ___ > Gnupg-users mailing list > Gnupg-users@gnupg.org > http://lists.gnupg.org/mailman/listinfo/gnupg-users > Ralf, I have had one key pair for over 20 years - for postmas...@gbenet.com I decided to create another key pair last week for my website - site-ad...@gbenet.com I set the settings to choose a key by email account select the key manually. I then sent a encrypted and signed test message from postmas...@gbenet.com to site-ad...@gbenet.com The email arrived and I could read it - I had no need to decrypt it because it was signed and encrypted to postmas...@gbenet.com I then decided to reply - it selected postmasters key but refused to sign the email - I entered the passphrase three times all by hand the same result. Puzzled by this - I decided to take the checkbox out of picking the right key for the email accounts of postmas...@gbenet.com and site-ad...@gbenet.com I decided to send just an encrypted email to postmas...@gbenet.com from site-ad...@gbenet.com "I can't find the key" even though I had selected the key - h.. I tried then to just send a signed reeply to postma...@gbenet.com not encrypted - the dialogue box popped up to enter the passphrase for site-ad...@gbenet.com - again it refused to accept the passphrase for site-ad...@gbenet.com Oh and I created a new key pair for da...@gbenet.com which are completely useless. I tried with all three keys - the only key to work is my postmas...@gbenet.com which I've used in Thunderbird and Enigmail for over 20 years. And after each of these config changes in Enigmail and Thunderbird I shut down Thunderbird deleted all the caches and rebooted my laptop. The results were all consistent: Enigmail will only work with ONE Key. It does not recognise any other key than the first key that was created. I'd like to use my da...@gbenet.com key here - some ages ago complained I was using postmas...@gbenet.com's key to sign emails. I thought it woulld be a good idea to have a key for this email account. BUT I can not use it - I can not sign emails. You moan - but offer no solutions. I can think of only one possible solution that will work delete site-admin's key pair - delete david's key pair and go back to what Thunderbird and Enigmail are happy with one key pair from postmas...@gbenet.com To be frank your comments are just like a bad fart - then they go away. You don't think perhaps can not think - your not too smart as to offer any solution. Regards David -- People Should Not Be Afraid Of Their Government - Their Government Should Be Afraid Of The People - When Injustice Becomes Law, REBELLION Becomes A DUTY! Join the Rebellion Today! The "Captain's B(L)og" https://gbenet.com ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Enigmail
* da...@gbenet.com: > I have three email accounts with their own keys - Enigmail does not > support this - you have to have one key and that's it. Nonsense! One can not only configure one PGP key per account (of which there can be many), one can even configure one key per identity. Each TB account can have multiplie identities; one of Thunderbird's killer features as far as I am concerned. Why you would lambast Enigmail for a non-problem, caused by you not configuring things properly, is beyond me. -Ralph ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Enigmail
> On 30 Jul 2019, at 18:47, David wrote: > > Hello Stefan, > > I have three email accounts with their own keys - Enigmail does not > support this - you have to have one key and that's it. That is simply not true. I used enigmail with multiple keys for years without any issues. If you’re having issues configuring it, perhaps ask on the enigmail list. A ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Enigmail
David wrote: Hi David, > I have three email accounts with their own keys - Enigmail does not > support this - you have to have one key and that's it. Ah, o.k. I never tried it, but it should be possible, with different accounts and keys (hopefully). > Am downloading and installing claws mail now so hope it will import all > my Thunderbird and Enigmail settings :) Claws-Mail is a different beast and I think this will not work. Regards Stefan -- box: 4a64758de9e8ceded2c481ee526440687fe2f3a828e3a813f87753ad30847b56 GPG: C93E252DFB3B4DB7EAEB846AD8D464B35E12AB77 (avail. on Hagrid, WKD) ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Enigmail
Stefan Claas via Gnupg-users: > David wrote: > >> Stefan Claas via Gnupg-users: >>> David wrote: >>> Hello Everyone, I am looking for an alternative to Enigmail - which fails to work. Any ideas as to a suitable replacement?? >>> >>> You may check out another MUA, like Claws-Mail, which I used with >>> GPG plug-ins in the past. It worked fine! >>> >>> Regards >>> Stefan >>> >> Hello Stefan - is it an add-on? Works on Linux? And does it support >> multiple keys which Enigmail does not? >> >> I will go check :) > > Claws-Mail is a MUA/NUA like Thunderbird. It includes GPG plug-ins. > > Regarding multiple key, I don't know what you mean, sorry. > > When I send messages (online) in the past with Claws-Mail I only > send to single individuals. > > If you mean multiple keys for yourself, I never checked this, > but assume then you may need also individual accounts in > Claws-Mail for multiple keys. > > Regards > Stefan > Hello Stefan, I have three email accounts with their own keys - Enigmail does not support this - you have to have one key and that's it. Am downloading and installing claws mail now so hope it will import all my Thunderbird and Enigmail settings :) David -- People Should Not Be Afraid Of Their Government - Their Government Should Be Afraid Of The People - When Injustice Becomes Law, REBELLION Becomes A DUTY! Join the Rebellion Today! The "Captain's B(L)og" https://gbenet.com ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Enigmail
David wrote: > Stefan Claas via Gnupg-users: > > David wrote: > > > >> Hello Everyone, > >> > >> I am looking for an alternative to Enigmail - which fails to work. > >> Any ideas as to a suitable replacement?? > > > > You may check out another MUA, like Claws-Mail, which I used with > > GPG plug-ins in the past. It worked fine! > > > > Regards > > Stefan > > > Hello Stefan - is it an add-on? Works on Linux? And does it support > multiple keys which Enigmail does not? > > I will go check :) Claws-Mail is a MUA/NUA like Thunderbird. It includes GPG plug-ins. Regarding multiple key, I don't know what you mean, sorry. When I send messages (online) in the past with Claws-Mail I only send to single individuals. If you mean multiple keys for yourself, I never checked this, but assume then you may need also individual accounts in Claws-Mail for multiple keys. Regards Stefan -- box: 4a64758de9e8ceded2c481ee526440687fe2f3a828e3a813f87753ad30847b56 GPG: C93E252DFB3B4DB7EAEB846AD8D464B35E12AB77 (avail. on Hagrid, WKD) ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Enigmail
Stefan Claas via Gnupg-users: > David wrote: > >> Hello Everyone, >> >> I am looking for an alternative to Enigmail - which fails to work. >> Any ideas as to a suitable replacement?? > > You may check out another MUA, like Claws-Mail, which I used with > GPG plug-ins in the past. It worked fine! > > Regards > Stefan > Hello Stefan - is it an add-on? Works on Linux? And does it support multiple keys which Enigmail does not? I will go check :) David -- People Should Not Be Afraid Of Their Government - Their Government Should Be Afraid Of The People - When Injustice Becomes Law, REBELLION Becomes A DUTY! Join the Rebellion Today! The "Captain's B(L)og" https://gbenet.com ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Enigmail
David wrote: > Hello Everyone, > > I am looking for an alternative to Enigmail - which fails to work. > Any ideas as to a suitable replacement?? You may check out another MUA, like Claws-Mail, which I used with GPG plug-ins in the past. It worked fine! Regards Stefan -- box: 4a64758de9e8ceded2c481ee526440687fe2f3a828e3a813f87753ad30847b56 GPG: C93E252DFB3B4DB7EAEB846AD8D464B35E12AB77 (avail. on Hagrid, WKD) ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Enigmail
Hello Everyone, I am looking for an alternative to Enigmail - which fails to work. Any ideas as to a suitable replacement?? Regards David -- People Should Not Be Afraid Of Their Government - Their Government Should Be Afraid Of The People - When Injustice Becomes Law, REBELLION Becomes A DUTY! Join the Rebellion Today! The "Captain's B(L)og" https://gbenet.com ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users
Re: Fresh certificate marked as expired / messed-up certificate chain pulling expired root cert in gpgsm
Am Mon, 22 Jul 2019 00:44:08 +0200 schrieb Ángel : > Well, it seems that «T-TeleSec GlobalRoot Class 2» was cross-signed by > «Deutsche Telekom Root CA 2». > This is typically done with new roots so that people with an older set > of roots can trust it through an older one. Right. But if this is standard procedure … > Now, your problem is that the old Root CA expired and your client is not > able to find the new trust path. > I would probably try deleting the T-TeleSec GlobalRoot Class 2 and > reimporting it from the root, to see if that helps. … why does it lead to this situation? I now simply deleted the offending cross-certificate via gpgsm --delete-key 0x61A8CF44 and now gpgsm happily accepts the new root cert. So, removal of an expired signature makes the chain valid. Shouldn't gnupg the just ignore the expired signature? I went further now, deleting the root cert itself: gpgsm --delete-key 0x17D894E9 But I figure that this does not matter at all, as dirmngr has it. I now fail to understand where the cross-signature came from. I don't see it in the certificate file I exported from Firefox (browser-based certification process). I don't see it in the root certificate file that is offered separately for download. As I still have a backup of my .gnupg folder, can I trace where the cross-signature entered the picture? And even with it present, is it correct behaviour for gpgsm to consider the chain invalid instead of just the cross-signature? It _does_ trust the new root cert already … no need for any further signature. Regards, Thomas PS: Just for fun, I'm trying to sign this post now. Maybe it won't even be broken by the list? -- Dr. Thomas Orgis HPC @ Universität Hamburg smime.p7s Description: S/MIME cryptographic signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users