[Enigmail] Encrypting and/or signing my emails fails since upgrade to 1.9.0

Darshaka Pathirana dpat at syn-net.org
Fri Feb 26 02:11:31 CET 2016


I also stumbled over this problem today. I am running Linux Mint
Debian Edition 2 (LMDE 2) with Cinnamon Desktop Environment,
Thunderbird and the GnuPG v2.0.26.

I solved this problem by disabling the gpg-agent-part of the Gnome
keyring. It was not as trivial as I though to do so, so here are some
possible solutions I want to share with you:

Disable per user:

  % mkdir -p ~/.config/autostart
  % cp /etc/xdg/autostart/gnome-keyring-gpg.desktop ~/.config/autostart/.

Solution I:

  % echo "Hidden=true" >> ~/.config/autostart/gnome-keyring-gpg.desktop

This seems to be the most generic way and should work on all desktops
supporting the Desktop Entry Specification:

[1] https://specifications.freedesktop.org/desktop-entry-spec/desktop-entry-spec-latest.html

Solution II:

Add "NoDisplay=false" (if it does not exists) or change NoDisplay=true
to false (if it does) in '~/.config/autostart/gnome-keyring-gpg.desktop'.

As I am running Cinnamon I also had to comment out the "OnlyShowIn="
line. After that the application was listed in the "Startup
Applications" where I was able to disable the GPG Password Agent.

[2] http://askubuntu.com/a/278309/501985

Disable system wide:

Yes, you could edit the file in '/etc/xdg/autostart' and make the same
changes I stated above but I find this solution much more appealing:

  % sudo dpkg-divert --local --rename --divert /etc/xdg/autostart/gnome-keyring-gpg.desktop-disable --add /etc/xdg/autostart/gnome-keyring-gpg.desktop

To revert that change, you can run:

  % sudo dpkg-divert --rename --remove /etc/xdg/autostart/gnome-keyring-gpg.desktop

[3] https://wiki.gnupg.org/GnomeKeyring

Please be aware that you have to logout and login before the changes
take effect.

But: after disabling the GPG-agent-part of the Gnome keyring I have to
enter the password twice before the mail is signed/encrypted. I still 
have no idea how to fix that.

 - Darsha

On 2016-02-25 17:52, patrick at enigmail.net (Patrick Brunschwig) wrote:
> It is better (=future proof) to disable the gpg-agent part of the Gnome
> keyring.
> -Patrick
> On 25.02.16 16:51, Mike Grunweg wrote:
>> Hi Olav and Patrick,
>> thanks for the advice. I do have GnuPG 1.4 installed, but Enigmail is
>> configured to use gpg2, which is version 2.0. However, looking through
>> the debugging logs now, I see lots of messages of this kind:
>> gpg: WARNING: The GNOME keyring manager hijacked the GnuPG agent.
>> gpg: WARNING: GnuPG will not work properly - please configure that tool
>> to not interfere with the GnuPG system!
>> So apparently gpg-agent and the gnome keyring manager don't play well
>> together, somehow. Searching the internets for this message yields a lot
>> of hits, with different advice given, ranging from just stopping GnuPG
>> from complaining [1] to disabling the gpg-agent part of the gnome
>> keyring [2].
>> As non-expert for the inner workings of Enigmail/GnuPG, I am not sure
>> which of these options (if any) is the right one. After all, Enigmail
>> does fail to sign my emails, so it seems to be more than an annoying,
>> but harmless warning here. Any advice from a more expert perspective?
>> Thanks a lot,
>> Mike
>> [1]
>> https://gebner.org/how-to-get-rid-of-the-the-gnome-keyring-manager-hijacked-the-gnupg-agent-warning.html
>> [2] https://wiki.gnupg.org/GnomeKeyring
>> Am 25.02.2016 um 13:40 schrieb Olav Seyfarth:
>>> Hi Mike,
>>>> Since upgrading Enigmail, I get error message ... gpg-agent
>>> Enigmail 1.9 needs GnuPG >= 2.x. I suspect you have 1.4 or gpg-agent
>>> does not work as it should. Please see Resolving issues with GnuPG 2.x
>>> and gpg-agent <https://enigmail.net/index.php/en/faq?view=category&id=14>
>> _______________________________________________
>> enigmail-users mailing list
>> enigmail-users at enigmail.net
>> To unsubscribe or make changes to your subscription click here:
>> https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net
> -------------- next part --------------
> A non-text attachment was scrubbed...
> Name: signature.asc
> Type: application/pgp-signature
> Size: 819 bytes
> Desc: OpenPGP digital signature
> URL: <https://admin.hostpoint.ch/pipermail/enigmail-users_enigmail.net/attachments/20160225/020b3d4a/attachment.sig>

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <https://admin.hostpoint.ch/pipermail/enigmail-users_enigmail.net/attachments/20160226/ebdd2871/attachment.sig>

More information about the enigmail-users mailing list