Re: [Enigmail] Weird behaviour using "Import Key" button

[Ludwig Hügelschäfer]

On 16.09.15 19:56, Alexander Buchner wrote:

> Thanks for looking into this!
> I now updated to a nightly build and I can confirm that the bug is fixed
> there.

:-) Thanks for reporting!

> By the way: Is there already a planned release schedule for a next
> stable version?

https://sourceforge.net/p/enigmail/wiki/Planning%20for%20version%201.9/

Note the "tentative".

Ludwig





signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Weird behaviour using "Import Key" button

[Alexander Buchner]

On 16.09.2015 17:49, Patrick Brunschwig wrote:
> I got the debug log. The behavior is a bug in Enigmail 1.8.2 that has
> been fixed a while ago (that is, I can reproduce it in 1.8.2, but not
> with nightly builds of Enigmail).
> 
> The problem is not related to the "import key" function, but to
> interpreting the verification result from a signed message unambiguously.
> 
> -Patrick

Thanks for looking into this!
I now updated to a nightly build and I can confirm that the bug is fixed
there.

By the way: Is there already a planned release schedule for a next
stable version?



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Weird behaviour using "Import Key" button

[Ian Mann]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

How do we turn on support for encrypted subject and other headers in the 
nightly build of V1.9

support encrypted subject and other headers [[Done]]
-BEGIN PGP SIGNATURE-
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=Hrb0
-END PGP SIGNATURE-

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Weird behaviour using "Import Key" button

[Ludwig Hügelschäfer]

On 11.09.15 16:35, Andreas Hirsch wrote:
> Alexander Buchner schrieb am 2015-09-11 um 16:25:
> 
>> Enigmail Security Info
>>
>> Part of the message signed
>> Unverified signature
>> Public key E6EDB692DE259A3F needed to verify signature
>>
>> UNTRUSTED Good signature from Stefan Huber 
> 
> everything ok

No, that's not ok. Enigmail claims it would need the key, but 1 line
later says "Untrusted good signature from " which it couldn't
without having the key. So, this is contradicting and weird indeed.

> in respect to the fact that you did'nt sign the key ;-)

Please do NOT give such advice. People really shouldn't sign other keys
without having verified their correctness.

Ludwig



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Weird behaviour using "Import Key" button

[Andreas Hirsch]

Ludwig Hügelschäfer schrieb am 2015-09-12 um 09:33:
> On 11.09.15 16:35, Andreas Hirsch wrote:
>> Alexander Buchner schrieb am 2015-09-11 um 16:25:
>>
>>> Enigmail Security Info
>>>
>>> Part of the message signed
>>> Unverified signature
>>> Public key E6EDB692DE259A3F needed to verify signature
>>>
>>> UNTRUSTED Good signature from Stefan Huber 
>>
>> everything ok
> 
> No, that's not ok. Enigmail claims it would need the key, but 1 line
> later says "Untrusted good signature from " which it couldn't
> without having the key. So, this is contradicting and weird indeed.
> 
>> in respect to the fact that you did'nt sign the key ;-)
> 
> Please do NOT give such advice. People really shouldn't sign other keys
> without having verified their correctness.

I didn't gave such an advice - I only supposed that the missing
signature could be the explanation for the situation

Andreas


___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Weird behaviour using "Import Key" button

[Alexander Buchner]

On 10.09.2015 17:41, Patrick Brunschwig wrote:
> It works flawlessly for me. There is only one signature on the
> message, and after the key was imported I can de-select and re-select
> the message and get the correctly verified signature.
> 
> -Patrick

Even after having rebooted the machine I still can observe the behavior
I already described.
I also could reproduce on a windows machine.

Should I attach the message to the mailing list so that others can test?



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Weird behaviour using "Import Key" button

[Patrick Brunschwig]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 11.09.15 09:53, Alexander Buchner wrote:
> On 10.09.2015 17:41, Patrick Brunschwig wrote:
>> It works flawlessly for me. There is only one signature on the 
>> message, and after the key was imported I can de-select and
>> re-select the message and get the correctly verified signature.
>> 
>> -Patrick
> 
> Even after having rebooted the machine I still can observe the
> behavior I already described. I also could reproduce on a windows
> machine.
> 
> Should I attach the message to the mailing list so that others can
> test?

Can you re-check if the key is really available in the key management?
Key ID Is 0xDE259A3F, created on 19/03/2015.

- -Patrick

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
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=tunD
-END PGP SIGNATURE-

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Weird behaviour using "Import Key" button

[Patrick Brunschwig]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 11.09.15 13:16, Alexander Buchner wrote:
> On 11.09.2015 11:11, Patrick Brunschwig wrote:
>> Can you re-check if the key is really available in the key
>> management? Key ID Is 0xDE259A3F, created on 19/03/2015.
> 
> It is. Here you can see a screenshot: 
> https://i.imgur.com/VDHx87a.png

If you click on the Details button and then on "Enigmail Security
Info", what is the precise message printed? I suspect it's not that
the key is unavailable, but something else.

- -Patrick

-BEGIN PGP SIGNATURE-
Version: GnuPG v2

iQIcBAEBCAAGBQJV8uFEAAoJENsRh7ndX2k7u6YP/2/TimPlPJHXIIbOassdmAf7
1T+7bb99KEVOdwUT3ylWMxSLfEaUUP2yvRMiiZtARYzMEsEjl2T+wPI7PDAzm/UR
NRg8xD1RflJSCajc4eeycvnUWKeVCKGOsGFgq7IeKndrwf80toiONBIbEtmOHDSy
iDZ2vp1E8xZkrUaFCvP9+ynl/CrA+ryASluO2hBBKrrz5kih4VIwMQyJCfJ8hYTk
zu2DDFYj4OnsbuMgXuaLaN7JYq7rMjZIYUei8n46NrqkbVldshj/uAfvPofFDi8c
FXm60PJzXhTLBTF3n3AB27xdQBTehfracTgi7l6EK87gPyDzCpPVkk5Yw84mguOV
SyU/xZIIiJrv02j1NefnUDVKRyxGhvmiUlGK9wFo0GT8GUDpEKIP9shGqPCAVEb3
UQsiEYWQqheKgTuE+44GuUVNoX85CP9xdSc49q7ERO81hsDmaEsLJvYUsW2/AmFp
65oIiZg28kGoa8xcMaOvKa7XP2eQYcX3KIJLfcdGQJFBsI5vN8zFZnNrWWAVyD4P
o7zpWBhvJAbwWv6XImMNYjL+JICRE7GNy43Hsg36EAXV1RKmaXpCVaG4cSv9lTR9
9RSlWGQB9lS35u4g5PeetW5M1e8N3CCHXUCht8W771nucvd2Mk8ccnCawIO88zSu
y3VoQtZ5bSjTEu813Df6
=o72u
-END PGP SIGNATURE-

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Weird behaviour using "Import Key" button

[Patrick Brunschwig]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 10.09.15 09:51, Alexander Buchner wrote:
> Hi,
> 
> I'm using Ubuntu 15.04, Thunderbird 38.2.0 (from the Ubuntu 
> repositories), gpg (GnuPG) 2.0.26 (from repositories) and Enigmail
> 1.8.2 (directly from Website).
> 
> I have read a signed message in TB, actually it's publicly
> available: 
> http://lists.wald.intevation.org/pipermail/gpg4win-users-de/2015-September/000799.html
>
>  Enigmail recognizes that it's signed and offers me to import the
> key. ("Part of the message signed with unknown key; click on the
> 'Import Key' button to download the key"), so I do that. Everything
> looks fine. The public key is listed in the "Enigmail Key 
> Management" window. But when I now read the message again there is
> still the hint that it's signed with an unknown key. So I guess
> that there's something wrong here?!

Could it be that the message is signed by more than 1 key? In other
words, if you click on the "Import Key" button again, does it display
the same key ID as before? If yes, did you re-load the message?

- -Patrick

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
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=M1ws
-END PGP SIGNATURE-

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Weird behaviour using "Import Key" button

[Alexander Buchner]

On 10.09.2015 15:19, Patrick Brunschwig wrote:
> Could it be that the message is signed by more than 1 key? In other
> words, if you click on the "Import Key" button again, does it display
> the same key ID as before? If yes, did you re-load the message?
> 
> -Patrick

Yes, if I click the button again, it displays a key ID for the key I
already downloaded.
And yes, I reloaded the message.

@ Patrick
I will send you the message in a separate Mail, so that you can check if
it is signed by more than one key. I'm not sure how to see this.



signature.asc
Description: OpenPGP digital signature
___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

Re: [Enigmail] Weird behaviour using "Import Key" button

[Patrick Brunschwig]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

On 10.09.15 16:21, Alexander Buchner wrote:
> On 10.09.2015 15:19, Patrick Brunschwig wrote:
>> Could it be that the message is signed by more than 1 key? In
>> other words, if you click on the "Import Key" button again, does
>> it display the same key ID as before? If yes, did you re-load the
>> message?
>> 
>> -Patrick
> 
> Yes, if I click the button again, it displays a key ID for the key
> I already downloaded. And yes, I reloaded the message.
> 
> @ Patrick I will send you the message in a separate Mail, so that
> you can check if it is signed by more than one key. I'm not sure
> how to see this.

It works flawlessly for me. There is only one signature on the
message, and after the key was imported I can de-select and re-select
the message and get the correctly verified signature.

- -Patrick

-BEGIN PGP SIGNATURE-
Version: GnuPG v2
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=IGXd
-END PGP SIGNATURE-

___
enigmail-users mailing list
enigmail-users@enigmail.net
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net