Bug#993546: kmail: KMail sees different signing key on same mail when enabling debian-keyring
Package: kmail
Version: 4:21.08.0-2
Severity: normal
Recently I received a signed email from Debian Developer joostvb@d.o.
I imported his public key to my keyring as follows:
gpg --keyserver keyring.debian.org --recv-keys 0xB8FAC2E250475B8CE940A91957930DAB0B86B067
When selecting that mail, KMail reports (after I signed it):
Message was signed by joostvb@mdcc.cx (Key ID: 0x57930DAB0B86B067).
The signature is valid and the key is fully trusted.
Excellent, exactly as I expected.
Joost's key is also part of the debian-keyring with the (exact) same
fingerprint. I figured it would be useful to have DD's key in gpg's
keyring, so I added the following to ~/.gnupg/gpg.conf:
keyring /usr/share/keyrings/debian-keyring.gpg
But when I then first select an(y) other email and then select Joost's
email again, KMail reports the following:
Message was signed on <date-time> with unknown key 0x92AAD901B21B4BC79A47A03054F1A66317486713.
The validity of the signature cannot be verified.
Status: Good signature
When doing "gpg --list-keys 0x57930DAB0B86B067" (or long key ID)
(with "list-options show-keyring=yes" in my gpg.conf) I see the same key
present in my keyring (pubring.kbx) and in Debian's debian-keyring.gpg.
If I then disable the "keyring ... debian-keyring.gpg" line again, all
is well again and enabling brings the problem back.
I've also started with a completely new ~/.gnupg and could still
reproduce the problem.
I have no clue how this can happen or be explained,
but it sounds like a bug to me.
Cheers,
Diederik
-- System Information:
Debian Release: bookworm/sid
APT prefers unstable-debug
APT policy: (500, 'unstable-debug'), (500, 'testing-debug'), (500, 'unstable'), (500, 'testing'), (101, 'experimental'), (1, 'experimental-debug')
Architecture: amd64 (x86_64)
Foreign Architectures: arm64
Kernel: Linux 5.10.0-8-amd64 (SMP w/16 CPU threads)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages kmail depends on:
ii akonadi-server 4:21.08.0-1
ii kdepim-runtime 4:21.08.0-1
ii kio 5.85.0-2
ii libc6 2.31-17
ii libgcc-s1 11.2.0-3
ii libgpgmepp6 1.16.0-1
ii libkf5akonadiagentbase5 [libkf5akonadiagentbase5-21.08] 4:21.08.0-1
ii libkf5akonadicontact5 [libkf5akonadicontact5-21.08] 4:21.08.0-1
ii libkf5akonadicore5abi2 [libkf5akonadicore5-21.08] 4:21.08.0-1
ii libkf5akonadimime5 [libkf5akonadimime5-21.08] 4:21.08.0-1
ii libkf5akonadisearch-bin 4:21.08.0-1
ii libkf5akonadisearch-plugins 4:21.08.0-1
ii libkf5akonadisearchdebug5 [libkf5akonadisearchdebug5-21.08] 4:21.08.0-1
ii libkf5akonadisearchpim5 [libkf5akonadisearchpim5-21.08] 4:21.08.0-1
ii libkf5akonadiwidgets5abi1 [libkf5akonadiwidgets5-21.08] 4:21.08.0-1
ii libkf5bookmarks5 5.85.0-2
ii libkf5calendarcore5abi2 5:5.85.0-2
ii libkf5calendarutils5 [libkf5calendarutils5-21.08] 4:21.08.0-1
ii libkf5codecs5 5.85.0-2
ii libkf5completion5 5.85.0-2
ii libkf5configcore5 5.85.0-2
ii libkf5configgui5 5.85.0-2
ii libkf5configwidgets5 5.85.0-2
ii libkf5contacts5 5:5.85.0-2
ii libkf5coreaddons5 5.85.0-2
ii libkf5crash5 5.85.0-2
ii libkf5dbusaddons5 5.85.0-2
ii libkf5grantleetheme-plugins 21.08.0-1
ii libkf5gravatar5abi2 [libkf5gravatar5-21.08] 4:21.08.0-1
ii libkf5guiaddons5 5.85.0-2
ii libkf5i18n5 5.85.0-2
ii libkf5iconthemes5 5.85.0-2
ii libkf5identitymanagement5 [libkf5identitymanagement5-21.08] 21.08.0-1
ii libkf5itemmodels5 5.85.0-2
ii libkf5itemviews5 5.85.0-2
ii libkf5jobwidgets5 5.85.0-2
ii libkf5kcmutils5 5.85.0-2
ii libkf5kiocore5 5.85.0-2
ii libkf5kiofilewidgets5 5.85.0-2
ii libkf5kiogui5 5.85.0-2
ii libkf5kiowidgets5 5.85.0-2
ii libkf5kontactinterface5 [libkf5kontactinterface5-21.08] 21.08.0-1
ii libkf5ksieveui5 [libkf5ksieveui5-21.08] 4:21.08.0-1
ii libkf5ldap5abi1 [libkf5ldap5-21.08] 21.08.0-1
ii libkf5libkdepim5 [libkf5libkdepim5-21.08] 4:21.08.0-1
ii libkf5libkleo5 [libkf5libkleo5-21.08] 4:21.08.0-1
ii libkf5mailcommon5abi2 [libkf5mailcommon5-21.08] 4:21.08.0-1
ii libkf5mailtransport5 [libkf5mailtransport5-21.08] 21.08.0-1
ii libkf5mailtransportakonadi5 [libkf5mailtransportakonadi5-21 21.08.0-1
ii libkf5messagecomposer5abi1 [libkf5messagecomposer5-21.08] 4:21.08.0-1
ii libkf5messagecore5abi1 [libkf5messagecore5-21.08] 4:21.08.0-1
ii libkf5messagelist5abi1 [libkf5messagelist5-21.08] 4:21.08.0-1
ii libkf5messageviewer5abi1 [libkf5messageviewer5-21.08] 4:21.08.0-1
ii libkf5mime5abi1 [libkf5mime5-21.08] 21.08.0-1
ii libkf5mimetreeparser5abi1 [libkf5mimetreeparser5-21.08] 4:21.08.0-1
ii libkf5notifications5 5.85.0-3
ii libkf5notifyconfig5 5.85.0-2
ii libkf5parts5 5.85.0-2
ii libkf5pimcommon5abi2 [libkf5pimcommon5-21.08] 4:21.08.0-1
ii libkf5pimcommonakonadi5abi1 [libkf5pimcommonakonadi5-21.08] 4:21.08.0-1
ii libkf5pimtextedit5abi2 [libkf5pimtextedit5-21.08] 21.08.0-1
ii libkf5service-bin 5.85.0-2
ii libkf5service5 5.85.0-2
ii libkf5sonnetui5 5.85.0-2
ii libkf5templateparser5 [libkf5templateparser5-21.08] 4:21.08.0-1
ii libkf5textwidgets5 5.85.0-2
ii libkf5tnef5 [libkf5tnef5-21.08] 4:21.08.0-1
ii libkf5webengineviewer5abi1 [libkf5webengineviewer5-21.08] 4:21.08.0-1
ii libkf5widgetsaddons5 5.85.0-2
ii libkf5windowsystem5 5.85.0-2
ii libkf5xmlgui5 5.85.0-3
ii libkuserfeedbackcore1 1.0.0-3
ii libkuserfeedbackwidgets1 1.0.0-3
ii libqgpgme7 1.16.0-1
ii libqt5core5a 5.15.2+dfsg-10
ii libqt5dbus5 5.15.2+dfsg-10
ii libqt5gui5 5.15.2+dfsg-10
ii libqt5keychain1 0.10.0-1
ii libqt5network5 5.15.2+dfsg-10
ii libqt5webenginecore5 5.15.5+dfsg-2
ii libqt5widgets5 5.15.2+dfsg-10
ii libqt5xml5 5.15.2+dfsg-10
ii libstdc++6 11.2.0-3
Versions of packages kmail recommends:
ii accountwizard 4:21.08.0-1
ii gnupg 2.2.27-2
ii kdepim-addons 21.08.0-1
ii kdepim-themeeditors 4:21.08.0-1
ii mbox-importer 4:21.08.0-1
ii pim-data-exporter 4:21.08.0-1
ii pim-sieve-editor 4:21.08.0-1
ii pinentry-qt [pinentry-x11] 1.1.1-1
Versions of packages kmail suggests:
pn clamav <none>
ii kaddressbook 4:21.08.0-1
ii kleopatra 4:21.08.0-1
ii procmail 3.22-26
ii spamassassin 3.4.6-1
-- no debconf information
Reply to: