gunpg-agent doesnt work anymore in Intrepid

Bug #262959 reported by John Vivirito
14
This bug affects 1 person
Affects Status Importance Assigned to Milestone
dpkg (Ubuntu)
Fix Released
Medium
Unassigned
Declined for Intrepid by Steve Langasek

Bug Description

Binary package hint: gnupg2

gnupg-agent fails to work at all.
It fails to allow me to sign packages or even send email out, I have tried with different keys and still no luck.
If i remove gnupg-agent than everything works as it should.
I have package firegpg and i cant test it for Intrepid until this is fixed since firegpg using gpg-agent or gnupg-agent to import key, it uses either agent, i have also tried starting ~/.gnupg from scratch to see if the problem was within that dir. and its not. Im almost willing to consider this a security vulnerability.

Linux Development 2.6.27-1-generic #1 SMP Sat Aug 23 23:20:09 UTC 2008 i686 GNU/Linux
gnupg2 = 2.0.9-2

Revision history for this message
John Vivirito (gnomefreak) wrote :

seems to only be password related. tested with packaging, firegpg, changing key info using gpg --edit-key, and i also tested by generating new key, and changing password for new key and the output is below

You need a passphrase to unlock the secret key for
user: "John Vivirito <email address hidden>"
1024-bit DSA key, ID 764D5E13, created 2008-09-01

gpg-agent[9325]: can't connect server: `ERR 67109133 can't exec `/usr/bin/pinentry': No such file or directory'
gpg-agent[9325]: can't connect to the PIN entry module: IPC connect call failed
gpg-agent[9325]: command get_passphrase failed: No pinentry
gpg: problem with the agent - disabling agent use
Enter the new passphrase for this secret key.

When ever i use gnupg-agent its seems it errors only on password being entered, it always says ".... failed password incorrect" I see this being a bug that is at least important since it has to do with encryption, decryption which in turn may affect the security of emails sent out or received. marking as important

Revision history for this message
John Vivirito (gnomefreak) wrote :

set to high

Changed in gnupg2:
importance: Undecided → High
Revision history for this message
Michael Bienia (geser) wrote :

Which pinentry variant have you installed?

Please also check if you have /usr/bin/pinentry and where it points to (if it exists).

BTW: I'm using gpg2 with gnupg-agent without problems in intrepid. So it looks like something got broken for you.

Revision history for this message
John Vivirito (gnomefreak) wrote :

/usr/bin/pinentry
/usr/bin/pinentry-gtk-2
/usr/bin/pinentry-qt4
/usr/bin/pinentry-x11

is all i have with locate. this has been a problem for a while i filed a bug against bzr-builddeb because that is wyhen i first saw it.
bug #254400
that is also seen without bzr-builden, using dpkg-buildpackage it fails to prompt me for password.
im gonna mark bzr bug dupe of this one. there is an update i just saw for gnupg-agent ill report back tomorrow on if it works.

Revision history for this message
John Vivirito (gnomefreak) wrote :

nevermind its installing it due to kmail depends its not a newer version same broken one.

no symlinks for pinentry-qt4 nor -gtk-2

pinentry links to /etc/alternatives/pinentry
pinentry-x11 links to /etc/alternatives/pinentry-x11

Revision history for this message
Michael Bienia (geser) wrote :

Can you please also check where /etc/alternatives/pinentry points to?

As gnupg-agent complained that it couldn't execute /usr/bin/pinentry.

Revision history for this message
John Vivirito (gnomefreak) wrote :

after changing symlinks to use -gtk-2 eveerything works except the build commands:
dpkg-buildpackage -S -sa -kA5C42601
bzr bd --merge --dont-purge --builder='dpkg-buildpackage -rfakeroot -S -sa -kA5C42601 -i.bzr' .

removing -fakeroot still fails to sign

Revision history for this message
John Vivirito (gnomefreak) wrote :

version of dpkg-dev:
gnomefreak@Development:~$ policy dpkg-dev
dpkg-dev:
  Installed: 1.14.20ubuntu6
  Candidate: 1.14.20ubuntu6
  Version table:
 *** 1.14.20ubuntu6 0
        500 http://gb.archive.ubuntu.com intrepid/main Packages
        100 /var/lib/dpkg/status

Revision history for this message
John Vivirito (gnomefreak) wrote :

changed package to dpkg-dev as it related to dpkg-buildpackage

Changed in gnupg2:
importance: High → Medium
Revision history for this message
John Vivirito (gnomefreak) wrote :

There is no need to nominate for Intrepid as it is already in Intrepid that the problem is seen. I reinstalled Intrepid and i have only had a few inssues and one of them was a few minutes ago. setting to not sign email caused it to be sent.

Revision history for this message
Kurt Huwig (k-huwig) wrote :

Bug #281487 contains a workaround

Revision history for this message
Steve Beattie (sbeattie) wrote :

This bug was reported in the Intrepid development cycle; removing regression-potential and marking as regression-release.

Revision history for this message
John Vivirito (gnomefreak) wrote :

This has been fixed as far as i can tell. I'm going to close this bug since it has been fixed.

Changed in dpkg:
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.