[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#993546: kmail: KMail sees different signing key on same mail when enabling debian-keyring



Control: reassign -1 libqgpgme7 1.16.0-1
Control: retitle -1 GPGMe does not take additional keyring into account to find keys.
Control: affects -1  kmail

On woensdag 15 september 2021 10:56:59 CEST Sandro Knauß wrote:
> > Thanks for your assistance. I've save the signature as 'signature.asc' and
> > the signed part of the email msg to 'attempt3-dos.txt'
> 
> great. Can you now do the same test. commenting/uncommenting the keyring
> line in the gpgconf? And kill gpg-agent in between to make 100% sure, that
> no left overs are taken.

I've rename 'signature.asc' to 'joostvb-signature.asc' and 'attempt3-dos.txt'
to 'joostvb-signed-msg-part-dos.txt' and ran the tests you requested.

=====================================================================
$ killall gpg-agent
$ ps aux | grep gpg-agent | grep -v grep
$ vim ~/.gnupg/gpg.conf 
$ tail -n1 ~/.gnupg/gpg.conf 
#keyring /usr/share/keyrings/debian-keyring.gpg
$ ps aux | grep gpg-agent | grep -v grep
diederik   12992  0.0  0.0 154884  3600 ?        SLs  12:32   0:00 /usr/bin/gpg-agent --supervised
$ gpg --verify joostvb-signature.asc joostvb-signed-msg-part-dos.txt 
gpg: Signature made di 31 aug 2021 16:07:34 CEST
gpg:                using RSA key 92AAD901B21B4BC79A47A03054F1A66317486713
gpg: Good signature from "Joost E. van Baal (Nederland, 1970)" [full]
gpg:                 aka "Joost van Baal <joostvb@mdcc.cx>" [full]
gpg:                 aka "Joost van Baal <J.E.vanBaal@uvt.nl>" [full]
gpg:                 aka "Joost van Baal <joostvb@debian.org>" [full]
gpg:                 aka "Joost van Baal <joostvb@enosig.org>" [full]
gpg:                 aka "Joost van Baal <joostvb@logreport.org>" [full]
gpg:                 aka "Joost van Baal <joostvb@ad1810.com>" [full]
gpg:                 aka "Joost van Baal-Ilić" [full]
Primary key fingerprint: B8FA C2E2 5047 5B8C E940  A919 5793 0DAB 0B86 B067
     Subkey fingerprint: 92AA D901 B21B 4BC7 9A47  A030 54F1 A663 1748 6713
$ killall gpg-agent
$ ps aux | grep gpg-agent | grep -v grep
$ vim ~/.gnupg/gpg.conf 
$ tail -n1 ~/.gnupg/gpg.conf 
keyring /usr/share/keyrings/debian-keyring.gpg
$ ps aux | grep gpg-agent | grep -v grep
diederik   13025  1.2  0.0 228616  3608 ?        SLs  12:33   0:00 /usr/bin/gpg-agent --supervised
$ gpg --verify joostvb-signature.asc joostvb-signed-msg-part-dos.txt 
gpg: Signature made di 31 aug 2021 16:07:34 CEST
gpg:                using RSA key 92AAD901B21B4BC79A47A03054F1A66317486713
gpg: Good signature from "Joost E. van Baal (Nederland, 1970)" [full]
gpg:                 aka "Joost van Baal <joostvb@mdcc.cx>" [full]
gpg:                 aka "Joost van Baal <J.E.vanBaal@uvt.nl>" [full]
gpg:                 aka "Joost van Baal <joostvb@debian.org>" [full]
gpg:                 aka "Joost van Baal <joostvb@enosig.org>" [full]
gpg:                 aka "Joost van Baal <joostvb@logreport.org>" [full]
gpg:                 aka "Joost van Baal <joostvb@ad1810.com>" [full]
gpg:                 aka "Joost van Baal-Ilić" [full]
Primary key fingerprint: B8FA C2E2 5047 5B8C E940  A919 5793 0DAB 0B86 B067
     Subkey fingerprint: 92AA D901 B21B 4BC7 9A47  A030 54F1 A663 1748 6713
=====================================================================

On woensdag 15 september 2021 13:16:21 CEST you wrote:
> That seems fine, as the gpg-agent has restarted. So I think we are ready to
> move this bug to gpgme. But anyways this all sounds like an upstream bug,
> so properly you have to create a bug at https://dev.gnupg.org/

I'll wait what the gpgme maintainers have to say first, before I('ll have to)
go through the trouble of creating an account there ...

Cheers,
  Diederik

Attachment: signature.asc
Description: This is a digitally signed message part.


Reply to: