Re: [qubes-users] Re: Enigmail v2.0 broke split-gpg

[cubit]

27. Mar 2018 15:40 by cu...@tutanota.com :


>
> Any persons got the workaround listed here: > 
> https://github.com/QubesOS/qubes-issues/issues/3750 
> >  to work in 3.2?   Is 
> there a particular line it needs to be done on.    When I add it to the file, 
> all that happens is my work VM connects to my vault VM and I get a blank 
> email no decrypted message
>
>







Is there plans to move the patch from r3.2 testing to stable any time soon?






-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/LANpmgw--3-0%40tutanota.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Enigmail v2.0 broke split-gpg

[mossy]

Michael Carbone:
> 
> 
> On 03/27/2018 01:58 PM, 'TFQOS' via qubes-users wrote:
>> On 27 March 2018 5:40 PM, cubit  wrote:
>>
>>> 27. Mar 2018 09:45 by mich...@qubes-os.org:
>>>
 couldn't figure out a fast solution so I downgraded back to v1.9.9 for
 the time being.

 You can do the same by downloading v1.9.9 and manually installing in
 thunderbird (and unchecking "update addons automatically"):

 https://www.enigmail.net/download/release/1.9/enigmail-1.9.9-sm+tb.xpi?type=application/octet-stream

 I will email Enigmail mailing list so that they are aware.
>>>
>>> Is anyone else who downgraded back to 1.9.9 getting stuck with a big 
>>> autocrypt header being displayed and a missing email body when receiving 
>>> emails from enigmail 2.0 users?
>>>
>>> Any persons got the workaround listed here: 
>>> https://github.com/QubesOS/qubes-issues/issues/3750 to work in 3.2?   Is 
>>> there a particular line it needs to be done on.When I add it to the 
>>> file, all that happens is my work VM connects to my vault VM and I get a 
>>> blank email no decrypted message
>>
>> Workaround proposed in
> https://github.com/QubesOS/qubes-issues/issues/3750 works for me in R3.2
>> I added a well formatted patch in the comments.
>>
>> TFQOS - Thanks For Qubes OS
>>
> 
> Hi all,
> 
> Just to update/close the thread, Marek pushed some patches into all
> testing repos and closed the issue:
> 
> https://github.com/QubesOS/qubes-issues/issues/3750
> 
> You can apply the patches immediately by enabling the testing repos:
> 
> https://www.qubes-os.org/doc/software-update-dom0/#testing-repositories
> https://www.qubes-os.org/doc/software-update-vm/#testing-repositories
> 
> or wait for them to land in stable/current.
> 
> The underlying bug is upstream of Enigmail in GnuPG, which Enigmail was
> trying to work around:
> 
> https://admin.hostpoint.ch/pipermail/enigmail-users_enigmail.net/2018-March/004870.html
> https://dev.gnupg.org/T2019
> 
> Thanks all for the contributions and for the quick patches Marek.
> 
> Michael
> 
> 

Thanks to you and Marek for such a quick turnaround on this!

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/fbe356e7-5e95-9dc2-aa47-b7965a62e13f%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Enigmail v2.0 broke split-gpg

[Michael Carbone]

On 03/27/2018 01:58 PM, 'TFQOS' via qubes-users wrote:
> On 27 March 2018 5:40 PM, cubit  wrote:
> 
>> 27. Mar 2018 09:45 by mich...@qubes-os.org:
>>
>>> couldn't figure out a fast solution so I downgraded back to v1.9.9 for
>>> the time being.
>>>
>>> You can do the same by downloading v1.9.9 and manually installing in
>>> thunderbird (and unchecking "update addons automatically"):
>>>
>>> https://www.enigmail.net/download/release/1.9/enigmail-1.9.9-sm+tb.xpi?type=application/octet-stream
>>>
>>> I will email Enigmail mailing list so that they are aware.
>>
>> Is anyone else who downgraded back to 1.9.9 getting stuck with a big 
>> autocrypt header being displayed and a missing email body when receiving 
>> emails from enigmail 2.0 users?
>>
>> Any persons got the workaround listed here: 
>> https://github.com/QubesOS/qubes-issues/issues/3750 to work in 3.2?   Is 
>> there a particular line it needs to be done on.When I add it to the 
>> file, all that happens is my work VM connects to my vault VM and I get a 
>> blank email no decrypted message
>
> Workaround proposed in
https://github.com/QubesOS/qubes-issues/issues/3750 works for me in R3.2
> I added a well formatted patch in the comments.
>
> TFQOS - Thanks For Qubes OS
>

Hi all,

Just to update/close the thread, Marek pushed some patches into all
testing repos and closed the issue:

https://github.com/QubesOS/qubes-issues/issues/3750

You can apply the patches immediately by enabling the testing repos:

https://www.qubes-os.org/doc/software-update-dom0/#testing-repositories
https://www.qubes-os.org/doc/software-update-vm/#testing-repositories

or wait for them to land in stable/current.

The underlying bug is upstream of Enigmail in GnuPG, which Enigmail was
trying to work around:

https://admin.hostpoint.ch/pipermail/enigmail-users_enigmail.net/2018-March/004870.html
https://dev.gnupg.org/T2019

Thanks all for the contributions and for the quick patches Marek.

Michael


-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/ad250449-d141-ea54-d789-b080be609f9e%40qubes-os.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Enigmail v2.0 broke split-gpg

[Michael Carbone]

On 03/27/2018 06:45 AM, Michael Carbone wrote:
> On 03/27/2018 06:41 AM, 'Eric Barrett' via qubes-users wrote:
>> On Tuesday, March 27, 2018 at 5:45:56 AM UTC-4, Michael Carbone wrote:
>>> couldn't figure out a fast solution so I downgraded back to v1.9.9 for
>>> the time being.
>>>
>>> You can do the same by downloading v1.9.9 and manually installing in
>>> thunderbird (and unchecking "update addons automatically"):
>>>
>>> https://www.enigmail.net/download/release/1.9/enigmail-1.9.9-sm+tb.xpi?type=application/octet-stream
>>
>> Thanks, Michael. That worked for me. How can we follow any updates if this 
>> is an Enigmail bug, at least in so far as we can know when we can update to 
>> the latest version?
> 
> You can follow the enigmail-users mailing list & the thread I created to
> watch for updates:
> 
> https://admin.hostpoint.ch/pipermail/enigmail-users_enigmail.net/2018-March/004854.html

also there is a qubes-issues issue that has a workaround:

https://github.com/QubesOS/qubes-issues/issues/3750

Thanks TFQOS for clarifying what the issue is.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e992e2d8-a131-b1d2-5db2-a0ae0fd78a4a%40accessnow.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Enigmail v2.0 broke split-gpg

['TFQOS' via qubes-users]

Workaround proposed in https://github.com/QubesOS/qubes-issues/issues/3750 
works for me in R3.2
I added a well formatted patch in the comments.

TFQOS - Thanks For Qubes OS

‐‐‐ Original Message ‐‐‐
On 27 March 2018 5:40 PM, cubit  wrote:

> 27. Mar 2018 09:45 by mich...@qubes-os.org:
>
>> couldn't figure out a fast solution so I downgraded back to v1.9.9 for
>> the time being.
>>
>> You can do the same by downloading v1.9.9 and manually installing in
>> thunderbird (and unchecking "update addons automatically"):
>>
>> https://www.enigmail.net/download/release/1.9/enigmail-1.9.9-sm+tb.xpi?type=application/octet-stream
>>
>> I will email Enigmail mailing list so that they are aware.
>
> Is anyone else who downgraded back to 1.9.9 getting stuck with a big 
> autocrypt header being displayed and a missing email body when receiving 
> emails from enigmail 2.0 users?
>
> Any persons got the workaround listed here: 
> https://github.com/QubesOS/qubes-issues/issues/3750 to work in 3.2?   Is 
> there a particular line it needs to be done on.When I add it to the file, 
> all that happens is my work VM connects to my vault VM and I get a blank 
> email no decrypted message
>
> cubit.
>
> --
> You received this message because you are subscribed to the Google Groups 
> "qubes-users" group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to qubes-users+unsubscr...@googlegroups.com.
> To post to this group, send email to qubes-users@googlegroups.com.
> To view this discussion on the web visit 
> [https://groups.google.com/d/msgid/qubes-users/L8c6SKz--3-0%40tutanota.com](https://groups.google.com/d/msgid/qubes-users/L8c6SKz--3-0%40tutanota.com?utm_medium=email_source=footer).
> For more options, visit https://groups.google.com/d/optout.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/LsbWMYGjJroUnS691z0fRirMOZayMHDvX7kJ1eGnj_b8yXL9657wGQjc-wyGSZUr58jNuorZidc4_dfRKfZVnSvte8Uy3_N6lkRZrKwMKTo%3D%40protonmail.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Enigmail v2.0 broke split-gpg

[cubit]

27. Mar 2018 09:45 by mich...@qubes-os.org :

> couldn't figure out a fast solution so I downgraded back to v1.9.9 for
> the time being.
>
> You can do the same by downloading v1.9.9 and manually installing in
> thunderbird (and unchecking "update addons automatically"):
>
> https://www.enigmail.net/download/release/1.9/enigmail-1.9.9-sm+tb.xpi?type=application/octet-stream
>  
> 
>
> I will email Enigmail mailing list so that they are aware.
>







Is anyone else who downgraded back to 1.9.9 getting stuck with a big autocrypt 
header being displayed and a missing email body when receiving emails from 
enigmail 2.0 users?




Any persons got the workaround listed here: 
https://github.com/QubesOS/qubes-issues/issues/3750 
 to work in 3.2?   Is 
there a particular line it needs to be done on.    When I add it to the file, 
all that happens is my work VM connects to my vault VM and I get a blank email 
no decrypted message








cubit.










-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/L8c6SKz--3-0%40tutanota.com.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Enigmail v2.0 broke split-gpg

[mossy]

Michael Carbone:
> On 03/27/2018 06:41 AM, 'Eric Barrett' via qubes-users wrote:
>> On Tuesday, March 27, 2018 at 5:45:56 AM UTC-4, Michael Carbone wrote:
>>> couldn't figure out a fast solution so I downgraded back to v1.9.9 for
>>> the time being.
>>>
>>> You can do the same by downloading v1.9.9 and manually installing in
>>> thunderbird (and unchecking "update addons automatically"):
>>>
>>> https://www.enigmail.net/download/release/1.9/enigmail-1.9.9-sm+tb.xpi?type=application/octet-stream
>>
>> Thanks, Michael. That worked for me. How can we follow any updates if this 
>> is an Enigmail bug, at least in so far as we can know when we can update to 
>> the latest version?
> 
> You can follow the enigmail-users mailing list & the thread I created to
> watch for updates:
> 
> https://admin.hostpoint.ch/pipermail/enigmail-users_enigmail.net/2018-March/004854.html
> 
> Michael
> 

Thanks, Michael, for being so on top of development of enigmail, which
so many people rely on.

My preferred fix would be for Linux enigmail users *never* to rely on
the Thunderbird Add-ons/Extensions menu to install Enigmail -- instead,
uninstall Engimail from Thunderbird Add-ons/Extensions menu, shut down
Thunderbrid, then install Enigmail from your Linux distribution
repository.  In Qubes, shut down your email client Qube/AppVm, the from
its templateVM:

[user@debian-9 ~]$ sudo apt-get install enigmail

[user@fedora-26 ]$ sudo dnf install thunderbird-enigmail

The version is still 1.99 in the repos.  Once 2.0 lands in
debian-unstable I'll see if it breaks and file a qubes bug report, so
that the qubes split-gpg community can be on top of this when the
"stable" repos go to Enigmail 2.x -- note that debian only has 2.0 in
the "experimental (rc-buggy)" repository, so it seems best not to
trouble Qubes devs with this issue just yet.

Some things for others on this thread to consider:

* you shouldn't be using fedora-25 templates anymore, mate!  They've not
received security updates for many months now.  Upgrade your template
like so:

https://www.qubes-os.org/doc/template/fedora/upgrade-25-to-26

Or install from scratch and change your AppVM templates and system-wide
default template.  From a dom0 terminal:

[username@dom0 ~] sudo qubes-dom0-update qubes-template-fedora-26

* over years of doing community group thunderbird+enigmail trainings
I've found that almost invariably Linux users will have some random
problem using the Thunderbird Add-on/Extension version, and that the
distro repo version fixes this.

* using qubes split-gpg in some cases it seems that the passphrase
prompt is broken, so you may have to clear the passphrase.  Qubes
developers consider the gpg passphrase to add no significant protection
(i.e. an attacker of gaining access to your machine to obtain your
private key would find it trivial to also obtain the passphrase; an
exception might be for external backups, in which case your backup
images and/or drive should be protected with a strong passphrase anyway).

Stay safe out there,

-m0ssy

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/29017d82-08c9-0565-7bd2-89ee8e10b70d%40riseup.net.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Enigmail v2.0 broke split-gpg

[Michael Carbone]

On 03/27/2018 06:41 AM, 'Eric Barrett' via qubes-users wrote:
> On Tuesday, March 27, 2018 at 5:45:56 AM UTC-4, Michael Carbone wrote:
>> couldn't figure out a fast solution so I downgraded back to v1.9.9 for
>> the time being.
>>
>> You can do the same by downloading v1.9.9 and manually installing in
>> thunderbird (and unchecking "update addons automatically"):
>>
>> https://www.enigmail.net/download/release/1.9/enigmail-1.9.9-sm+tb.xpi?type=application/octet-stream
> 
> Thanks, Michael. That worked for me. How can we follow any updates if this is 
> an Enigmail bug, at least in so far as we can know when we can update to the 
> latest version?

You can follow the enigmail-users mailing list & the thread I created to
watch for updates:

https://admin.hostpoint.ch/pipermail/enigmail-users_enigmail.net/2018-March/004854.html

Michael

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/1167516c-f54e-e8fb-ff71-b0618e3f3ef6%40accessnow.org.
For more options, visit https://groups.google.com/d/optout.

Re: [qubes-users] Re: Enigmail v2.0 broke split-gpg

['Eric Barrett' via qubes-users]

On Tuesday, March 27, 2018 at 5:45:56 AM UTC-4, Michael Carbone wrote:
> couldn't figure out a fast solution so I downgraded back to v1.9.9 for
> the time being.
> 
> You can do the same by downloading v1.9.9 and manually installing in
> thunderbird (and unchecking "update addons automatically"):
> 
> https://www.enigmail.net/download/release/1.9/enigmail-1.9.9-sm+tb.xpi?type=application/octet-stream

Thanks, Michael. That worked for me. How can we follow any updates if this is 
an Enigmail bug, at least in so far as we can know when we can update to the 
latest version?

Eric

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/e14eb68a-5eef-4716-8272-3a823fa6616b%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.