[Libreoffice-bugs] [Bug 115538] GnuPG / PGP keys not found on Mac unless from command line

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=115538

--- Comment #15 from Kysh  ---
(In reply to Thorsten Behrens (CIB) from comment #14)
> Ah hmm, it appears Apple is changing launchd there frequently.
> 
> Now the methods du jour are described here:
> 
> *
> https://apple.stackexchange.com/questions/106355/setting-the-system-wide-
> path-environment-variable-in-mavericks
> *
> https://apple.stackexchange.com/questions/289060/setting-variables-in-
> environment-plist

I can confirm setting the path in environment.plist as suggested above works
for both LO and LODev (When launched from Dock and Launchpad)

However one caveat is that this method will not work for launching via
Spotlight. When launched via Spotlight no keys are found.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 115538] GnuPG / PGP keys not found on Mac unless from command line

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=115538

--- Comment #14 from Thorsten Behrens (CIB)  ---
Ah hmm, it appears Apple is changing launchd there frequently.

Now the methods du jour are described here:

*
https://apple.stackexchange.com/questions/106355/setting-the-system-wide-path-environment-variable-in-mavericks
*
https://apple.stackexchange.com/questions/289060/setting-variables-in-environment-plist

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 115538] GnuPG / PGP keys not found on Mac unless from command line

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=115538

--- Comment #13 from Thorsten Behrens (CIB)  ---
(In reply to Kysh from comment #12)
> I see no output whatsoever on the trace when launched from GUI. Attached the
> initial trace output as its quite large. Let me know if more output will be
> needed.

That's unfortunate, since that's the interesting part. Regardless, I'm now
reasonably sure it's the missing path for GUI applications - if you could try
setting this globally, as per
https://serverfault.com/questions/16355/how-to-set-global-path-on-os-x , to
/usr/local/MacGPG2/bin and retry (possibly after reboot) ?

If that's confirmed, I'll need to dig a bit how that's implemented for other
client code, e.g. EnigMail on OSX...

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 115538] GnuPG / PGP keys not found on Mac unless from command line

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=115538

--- Comment #12 from Kysh  ---
(In reply to Kysh from comment #11)
> Created attachment 140919 [details]
> GPGME debug trace

Did a bit more digging and also ran a trace against gpgme.

I see my shell has, as part of the PATH environment, /usr/local/MacGPG2/bin.
The trace output when LO opened via CLI also confirms that its using that path
for the various binaries for GPG.

I see no output whatsoever on the trace when launched from GUI. Attached the
initial trace output as its quite large. Let me know if more output will be
needed.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 115538] GnuPG / PGP keys not found on Mac unless from command line

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=115538

--- Comment #11 from Kysh  ---
Created attachment 140919
  --> https://bugs.documentfoundation.org/attachment.cgi?id=140919=edit
GPGME debug trace

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 115538] GnuPG / PGP keys not found on Mac unless from command line

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=115538

--- Comment #10 from Thorsten Behrens (CIB)  ---
(In reply to Kysh from comment #8)
> I can confirm that both LO & LODev when opened via the terminal "open
> "/Applications/LibreOffice.app"" and  "open
> "/Applications/LibreOfficeDev.app"" do show the PGP signatures/keys.
> 
> Ditto to opening a document via the CLI ---> "open "Some_Document.odt"

This is helpful feedback.

So how this works internally, is that there's a library called gpgme, that will
try & find a system-wide gpg install, by looking for a gpgconf binary in the
PATH (and getting everything else from the output of that binary)

It _seems_ relevant that all uses from a shell work, and uses from the Finder
do not. Until I manage to setup a debuggable build on Mac, perhaps getting
trace output from gpgme might provide further clues:
https://www.gnupg.org/documentation/manuals/gpgme/Debugging.html ?

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 115538] GnuPG / PGP keys not found on Mac unless from command line

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=115538

--- Comment #9 from Kysh  ---
(In reply to Kysh from comment #8)
> (In reply to Alex Thurgood from comment #7)
> > *** Bug 116638 has been marked as a duplicate of this bug. ***
> 
> I can confirm that both LO & LODev when opened via the terminal "open
> "/Applications/LibreOffice.app"" and  "open
> "/Applications/LibreOfficeDev.app"" do show the PGP signatures/keys.
> 
> Ditto to opening a document via the CLI ---> "open "Some_Document.odt"
> 
> I went a bit further and checked Preferences--Security--Certificate Path. It
> seems to be looking for signatures in a Firefox directory something like
> "/Users/tony/Library/Application
> Support/Firefox/Profiles/rw7dqdyo.default-1234567890123"
> 
> Might be grasping at straws here but does it mean that the
> certficate/key/signature store for Firefox is being used as default? The
> directory is the same in both LO and LODev whether opened via CLI or GUI
> only that when opened in CLI mode we have the OpenPGP keys now present.

Also seeking some clarification on the error "Could not find any certificate
manager" when you click on the start certificate manager under Digital
Signature, just what is LO looking for as a certificate manager?

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 115538] GnuPG / PGP keys not found on Mac unless from command line

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=115538

--- Comment #8 from Kysh  ---
(In reply to Alex Thurgood from comment #7)
> *** Bug 116638 has been marked as a duplicate of this bug. ***

I can confirm that both LO & LODev when opened via the terminal "open
"/Applications/LibreOffice.app"" and  "open "/Applications/LibreOfficeDev.app""
do show the PGP signatures/keys.

Ditto to opening a document via the CLI ---> "open "Some_Document.odt"

I went a bit further and checked Preferences--Security--Certificate Path. It
seems to be looking for signatures in a Firefox directory something like
"/Users/tony/Library/Application
Support/Firefox/Profiles/rw7dqdyo.default-1234567890123"

Might be grasping at straws here but does it mean that the
certficate/key/signature store for Firefox is being used as default? The
directory is the same in both LO and LODev whether opened via CLI or GUI only
that when opened in CLI mode we have the OpenPGP keys now present.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 115538] GnuPG / PGP keys not found on Mac unless from command line

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=115538

Alex Thurgood  changed:

   What|Removed |Added

 CC||tkin...@gmail.com

--- Comment #7 from Alex Thurgood  ---
*** Bug 116638 has been marked as a duplicate of this bug. ***

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 115538] GnuPG / PGP keys not found on Mac unless from command line

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=115538

Arturo Candela  changed:

   What|Removed |Added

Version|6.0.0.3 release |6.0.2.1 release

--- Comment #6 from Arturo Candela  ---
Hi maybe the bug is related with the cryptography module of LibreOffice in Mac.

If you want, tell me and I will open another bug. I've been trying to sign a
document with my software X509 and with my Spanish Identification Smart Card
(Known in Spain as DNIe)(PKCS Module). 

LibreOffice Version: 6.0.2.1 with Spanish Translation.

That's what I got:

If I use the Latest Version of Firefox (58.0.2-64bit Mac) profile with the PCKS
#11 configured I'm able to view all of my software certificates but not the
ones installed in the smartCard. And if I run LibreOffice from the command line
I get the following messages:

(pkix_CacheCert_Add: PKIX_PL_HashTable_Add for Certs skipped: entry existed
(pkix_CacheCert_Add: PKIX_PL_HashTable_Add for Certs skipped: entry existed
(pkix_CacheCert_Add: PKIX_PL_HashTable_Add for Certs skipped: entry existed
(pkix_CacheCert_Add: PKIX_PL_HashTable_Add for Certs skipped: entry existed

Instead, if change the security profile to Thunderbird (52.6.0-64bit Mac)
profile with the PCKS #11 I'm able to view all of my certificates - LibreOffice
asks me for the DNIe key - And I'm able to sign using the certificates from the
Smart Card.

In both cases when I reopen LibreOffice, It tells me that the original document
has been modified.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 115538] GnuPG / PGP keys not found on Mac unless from command line

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=115538

--- Comment #5 from Hans-Gerd Ernst  ---
Libre Office 6.0.0.3 does not find the GPG-certificate to digitally sign an
odt-file. 


Some information about the environment: 

Version: 6.0.0.3
Build ID: 64a0f66915f38c6217de274f0aa8e15618924765
CPU threads: 2; OS: Mac OS X 10.10.5; UI render: default; 
Locale: en-GB (en_GB.UTF-8); Calc: group

GPGTools, 2017(GPL v3)

Firefox 58.0.2

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 115538] GnuPG / PGP keys not found on Mac unless from command line

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=115538

--- Comment #4 from Thorsten Behrens (CIB)  ---
wow, interesting effect. will need to replicate on OSX & see if we can somehow
workaround that. sigh.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 115538] GnuPG / PGP keys not found on Mac unless from command line

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=115538

Alex Thurgood  changed:

   What|Removed |Added

 Status|UNCONFIRMED |NEW
 Ever confirmed|0   |1

--- Comment #2 from Alex Thurgood  ---
OK, so even after making the gnupg folder visible, LO still can't find any
keys.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 115538] GnuPG / PGP keys not found on Mac unless from command line

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=115538

Alex Thurgood  changed:

   What|Removed |Added

 CC||t...@libreoffice.org

--- Comment #3 from Alex Thurgood  ---
@Thorsten : any ideas ?

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

[Libreoffice-bugs] [Bug 115538] GnuPG / PGP keys not found on Mac unless from command line

[bugzilla-daemon]

https://bugs.documentfoundation.org/show_bug.cgi?id=115538

--- Comment #1 from Alex Thurgood  ---
I can't find my GnuPG key via LibreOffice :

Version: 6.0.0.3
Build ID: 64a0f66915f38c6217de274f0aa8e15618924765
Threads CPU : 8; OS : Mac OS X 10.13.3; UI Render : par défaut; 
Locale : fr-FR (fr_FR.UTF-8); Calc: group

I'm guessing that this is because the gnupg folder is hidden in the file system
by default in MacOS.

-- 
You are receiving this mail because:
You are the assignee for the bug.___
Libreoffice-bugs mailing list
Libreoffice-bugs@lists.freedesktop.org
https://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs