Daniel Kahn Gillmor wrote on 08/10/2017 11:18 PM:
> Hi D.R.--
>
> On Thu 2017-08-10 08:16:02 -0600, D. R. Evans wrote:
>> On 64-bit jessie, updating to the current officially supported versions of
>> thunderbird/iceweasel (version 1.52.2.1) and enigmail, the enigmail portion
>> (version 2.1.9.8.1.1) is unusable because it requires gnupg 2.0.7, whereas
>> the
>> version in the jessie repository is 1.4.18. See screenshot at
>> https://www.dropbox.com/s/6s3z6jy5ns3z9qd/gnupg1.png?dl=0.
>>
>> The only solution appears to be to downgrade thunderbird/iceweasel and
>> enigmail
>> to the prior working versions.
>
> [...]
>> Versions of packages enigmail depends on:
>> ii gnupg 1.4.18-7+deb8u3
>> ii gnupg2 2.0.26-6+deb8u1
>> ii icedove1:45.8.0-3~deb8u1
>> ii libc6 2.19-18+deb8u10
>> ii thunderbird [icedove] 1:45.8.0-3~deb8u1
>>
>> Versions of packages enigmail recommends:
>> ii gnupg-agent 2.0.26-6+deb8u1
>> ii gnupg22.0.26-6+deb8u1
>> ii pinentry-gtk2 [pinentry-x11] 0.8.3-2
>
>
> It looks to me like you have gnupg2 2.0.26 installed. enigmail should
> find that automatically if you haven't explicitly overridden its path to
> gpg.
Before answering, I should make a positive assertion that, as far as I know,
apart from support for ZFS (which is obviously unrelated to this issue) I
believe that everything on this machine is exactly as-installed by synaptic
from the official jessie repositories. FWIW, I too saw in the bug report that
gnupg2 was installed; something else must have installed that at some point.
Nothing in my notes says that I ever installed it explicitly. (I did install
gnupg explicitly, several major versions of debian ago.)
Now, to your question:
>
> Do you have a path set explicitly in enigmail's configuration?
>
The Basic Settings screen of enigmail says:
Gnupg was found in /usr/bin/gpg
The Override box ix checked, but it points to the same file.
I do see that there is also a /usr/bin/gpg2 file installed (presumably from
gunpg2).
> Also, do you have gnome-keyring installed?
Apparently, the answer is Yes". As with gnupg2, I did not install it
explicitly (and I don't use, and never have used, gnome on this or any other
mabchine) so something else must have installed it.
> is it configured to
> masquerade as gpg-agent? if so, you might want to disable that.
I'm not sure. Typing "gnome-keyring" produces:
[HN:radio] gnome-keyring
usage: gnome-keyring command [options]
commands: certificate-exception
import
version
[HN:radio]
so it's not obvious how to see the configuration details.
Anyway, given the above facts, I changed the enigmail configuration so that it
pointed to /usr/bin/gnupg2 instead of /usr/bin/gnupg. Apparently, this change
requires leaving and reinvoking thunderbird for it to take effect, but once I
realised that, enigmail began to work correctly.
So the problem is solved here, although perhaps enigmail in debian should be
changed to use /usr/bin/gnupg2 if it's installed, especially if gnupg is not
an adequate version.
Thank you very much for your help.
Doc
--
Web: http://enginehousebooks.com/drevans
signature.asc
Description: OpenPGP digital signature
