Avatar for Username

Mozilla Destek’te Ara

Destek dolandırıcılığından kaçının. Mozilla sizden asla bir telefon numarasını aramanızı, mesaj göndermenizi veya kişisel bilgilerinizi paylaşmanızı istemez. Şüpheli durumları “Kötüye kullanım bildir” seçeneğini kullanarak bildirebilirsiniz.

Learn More

Bu başlık arşivlendi. Yardıma ihtiyacınız varsa lütfen yeni bir soru sorun.

Public key of someone else worked in TB68+Enigmail, but TB78 refuses to use it

  • 8 yanıt
  • 1 kişi bu sorunu yaşıyor
  • 221 gösterim
  • Son yanıtı yazan: christ1

perpetuum-mobile
perpetuum-mobile
more options

I have sucessfully migreated from TB68+Eigmail to TB78.8.1 (64-Bit) running under Xubuntu 18.04.

Except for one counterpart, all keys could be migrated through the transitionla Enigmail plugin.

However, there is one public key, which TB refuses to use for encryption. Of course I don't know the intricacies if this particular key and how it was made. I can export it to a file *.public.asc and this file is 7,1kB big. When I want to write an email to a recipient, the first thing that happens on sending: "The message cannot be sent with end-to-end encryption because there are problems with the keys of the following recipients: ...".

The recipient has to deal with many others and of course has little inclination to distribute new public keys just because of me and fears decrypting problems with his other correspondence partners who continue to use his old key during the transition period which he fears to be quite long. I understand that. Unfortunately, the error message does not give the slightest hint as to what is wrong with the key in question in Thunderbird's sense. In any case, the key is still valid for years to come.

It is not offered for selection in the menu "Security OpenPGP message". However, if I click on one of the two buttons below it, TB knows the key related to the email address in question.

With the second option 'Search for new or updated key' TB also finds the key and I can also say that I have checked it and that the fingerprint is correct. But then I am returned to the "Security OpenPGP message", two dialogue windows before and with no key to select. I am caught in an endless loop of questions that do not help me.

Where can I see what condition this public key violates? Is there a URL where I can enter the text form of the key and it will tell mri why TB cannot cope with exactly this key. If I want to convince my correspondence partner to generate a new key pair, I must at least be able to tell him what is wrong with the one which he has given me before and which we used for quite some time!

BTW: If I have to send an unencrypted mail because I don't have no working public key I have to switch off encryption. But then I switch it off for all subsequent Emails. If I want to re-enable it, I have to send myself or someone else an encrypted email. That's not a very smart design decision in the UI! At least I expect a setting Always encrypt which possibly lets me change my mind for one particular email, but not for all subsequent ones!

I have sucessfully migreated from TB68+Eigmail to TB78.8.1 (64-Bit) running under Xubuntu 18.04. Except for one counterpart, all keys could be migrated through the transitionla Enigmail plugin. However, there is one public key, which TB refuses to use for encryption. Of course I don't know the intricacies if this particular key and how it was made. I can export it to a file *.public.asc and this file is 7,1kB big. When I want to write an email to a recipient, the first thing that happens on sending: "The message cannot be sent with end-to-end encryption because there are problems with the keys of the following recipients: ...". The recipient has to deal with many others and of course has little inclination to distribute new public keys just because of me and fears decrypting problems with his other correspondence partners who continue to use his old key during the transition period which he fears to be quite long. I understand that. Unfortunately, the error message does not give the slightest hint as to what is wrong with the key in question in Thunderbird's sense. In any case, the key is still valid for years to come. It is not offered for selection in the menu "Security OpenPGP message". However, if I click on one of the two buttons below it, TB knows the key related to the email address in question. With the second option 'Search for new or updated key' TB also finds the key and I can also say that I have checked it and that the fingerprint is correct. But then I am returned to the "Security OpenPGP message", two dialogue windows before and with no key to select. I am caught in an endless loop of questions that do not help me. Where can I see what condition this public key violates? Is there a URL where I can enter the text form of the key and it will tell mri why TB cannot cope with exactly this key. If I want to convince my correspondence partner to generate a new key pair, I must at least be able to tell him what is wrong with the one which he has given me before and which we used for quite some time! BTW: If I have to send an unencrypted mail because I don't have no working public key I have to switch off encryption. But then I switch it off for all subsequent Emails. If I want to re-enable it, I have to send myself or someone else an encrypted email. That's not a very smart design decision in the UI! At least I expect a setting Always encrypt which possibly lets me change my mind for one particular email, but not for all subsequent ones!

Tüm Yanıtlar (8)

christ1
christ1
  • Top 25 Contributor
more options

Is there anything related in the Error Console (Ctrl+Shift+J) when you attempt to encrypt to that key?

perpetuum-mobile
perpetuum-mobile Sorunun sahibi
more options

Nothing happens after I press Ctrl+Shift+J.

Probably you mean the function which I found in my German Thunderbird (but only while I was in the function to work on Thunderbird's settings) under Extras>Entwickler-Werkzeuge>Fehlerkonsole which gives me access to some logfile.

This is the content of what is in this window:


07:47:01.796 [Exception... "Component returned failure code: 0x80520001 (NS_ERROR_FILE_UNRECOGNIZED_PATH) [nsIXPCComponents_Utils.readUTF8URI]" nsresult: "0x80520001 (NS_ERROR_FILE_UNRECOGNIZED_PATH)" location: "JS frame :: resource://gre/modules/L10nRegistry.jsm :: L10nRegistry.loadSync :: line 658" data: no] L10nRegistry.jsm:658:19 07:47:02.070 Successfully loaded OpenPGP library librnp.so from /usr/lib/thunderbird/librnp.so RNPLib.jsm:49:13 07:47:02.208 Enigmail bootstrap completed 07:47:02.208 Enigmail startup completed 07:47:02.852 public keys: 109, secret keys: 12 RNPLib.jsm:247:15 07:47:02.854 Successfully loaded optional OpenPGP library libgpgme.so.11 from system's standard library locations GPGMELib.jsm:59:13 07:47:02.855 gpgme version: 1.10.0 GPGMELib.jsm:231:15 07:47:02.865 [Exception... "Component returned failure code: 0x80520001 (NS_ERROR_FILE_UNRECOGNIZED_PATH) [nsIXPCComponents_Utils.readUTF8URI]" nsresult: "0x80520001 (NS_ERROR_FILE_UNRECOGNIZED_PATH)" location: "JS frame :: resource://gre/modules/L10nRegistry.jsm :: L10nRegistry.loadSync :: line 658" data: no] L10nRegistry.jsm:658:19 07:47:03.422 [Exception... "Component returned failure code: 0x80520001 (NS_ERROR_FILE_UNRECOGNIZED_PATH) [nsIXPCComponents_Utils.readUTF8URI]" nsresult: "0x80520001 (NS_ERROR_FILE_UNRECOGNIZED_PATH)" location: "JS frame :: resource://gre/modules/L10nRegistry.jsm :: L10nRegistry.loadSync :: line 658" data: no] L10nRegistry.jsm:658:19 07:47:03.822 [Exception... "Component returned failure code: 0x80520001 (NS_ERROR_FILE_UNRECOGNIZED_PATH) [nsIXPCComponents_Utils.readUTF8URI]" nsresult: "0x80520001 (NS_ERROR_FILE_UNRECOGNIZED_PATH)" location: "JS frame :: resource://gre/modules/L10nRegistry.jsm :: L10nRegistry.loadSync :: line 658" data: no] L10nRegistry.jsm:658:19 07:47:03.824 [Exception... "Component returned failure code: 0x80520001 (NS_ERROR_FILE_UNRECOGNIZED_PATH) [nsIXPCComponents_Utils.readUTF8URI]" nsresult: "0x80520001 (NS_ERROR_FILE_UNRECOGNIZED_PATH)" location: "JS frame :: resource://gre/modules/L10nRegistry.jsm :: L10nRegistry.loadSync :: line 658" data: no] L10nRegistry.jsm:658:19 07:47:04.461 1620539224461 tbsortfolders.folderPane DEBUG Init 07:47:04.461 1620539224461 tbsortfolders.folderPane DEBUG Add observer 07:47:04.887 Successfully loaded OTR library libotr.so.5 from system's standard library locations OTRLib.jsm:43:13 07:47:05.640 uncaught exception: Object subprocess.jsm:344:22 07:47:13.355 [Exception... "Component returned failure code: 0x80520001 (NS_ERROR_FILE_UNRECOGNIZED_PATH) [nsIXPCComponents_Utils.readUTF8URI]" nsresult: "0x80520001 (NS_ERROR_FILE_UNRECOGNIZED_PATH)" location: "JS frame :: resource://gre/modules/L10nRegistry.jsm :: L10nRegistry.loadSync :: line 658" data: no] L10nRegistry.jsm:658:19 07:47:13.358 [Exception... "Component returned failure code: 0x80520001 (NS_ERROR_FILE_UNRECOGNIZED_PATH) [nsIXPCComponents_Utils.readUTF8URI]" nsresult: "0x80520001 (NS_ERROR_FILE_UNRECOGNIZED_PATH)" location: "JS frame :: resource://gre/modules/L10nRegistry.jsm :: L10nRegistry.loadSync :: line 658" data: no] L10nRegistry.jsm:658:19 07:51:06.273 OverrideError: An entry font-size-label of type message is already defined in this bundle 07:51:06.274 OverrideError: An entry window-close-key of type message is already defined in this bundle 07:51:06.274 OverrideError: An entry startup-label of type message is already defined in this bundle 07:51:06.274 OverrideError: An entry focus-search-shortcut of type message is already defined in this bundle 07:51:06.274 OverrideError: An entry close-button of type message is already defined in this bundle 07:51:06.326 OverrideError: An entry font-size-label of type message is already defined in this bundle 07:51:06.326 OverrideError: An entry window-close-key of type message is already defined in this bundle 07:51:06.326 OverrideError: An entry startup-label of type message is already defined in this bundle 07:51:06.326 OverrideError: An entry focus-search-shortcut of type message is already defined in this bundle 07:51:06.326 OverrideError: An entry close-button of type message is already defined in this bundle 07:51:06.411 OverrideError: An entry font-size-label of type message is already defined in this bundle 07:51:06.411 OverrideError: An entry window-close-key of type message is already defined in this bundle 07:51:06.412 OverrideError: An entry startup-label of type message is already defined in this bundle 07:51:06.412 OverrideError: An entry focus-search-shortcut of type message is already defined in this bundle 07:51:06.412 OverrideError: An entry close-button of type message is already defined in this bundle 07:51:07.276 NotSupportedError: CustomElementRegistry.define: 'conversation-browser' has already been defined as a custom element conversation-browser.js:853 07:51:10.238 Leerer String an getElementById() übergeben. 2 browser-custom-element.js:411:22 07:52:13.428 in getEncryptionFlags, gSendEncrypted=true, gSendSigned=true enigmailMsgComposeOverlay.js:1718:13 07:52:13.457 getCryptParams parameters: from=0x07C3FA21AE77B98E, to=, bcc=, hash=SHA256, flags=4802, ascii=0, errorObj= Object { value: "" } 

, logObj=

Object { } encryption.jsm:86:13 07:52:13.458 getCryptParams, got: to=, bcc= encryption.jsm:125:13 07:52:13.458 getCryptParams returning: encryption.jsm:178:13 07:52:13.458 Object { sender: "0x07C3FA21AE77B98E", sign: false, signatureHash: "", sigTypeClear: false, sigTypeDetached: false, encrypt: true, encryptToSender: true, armor: true, senderKeyIsExternal: false, to: [], … } encryption.jsm:179:13 07:52:13.473 sendFlags=000012c2 encryption.jsm:358:13 08:01:22.628 Layout-Darstellung wurde erzwungen, bevor die Seite vollständig geladen war. Falls Stylesheet noch nicht geladen sind, kann dies zu einem kurzzeitigen Darstellung des Inhalts ohne Formatierung führen. contentAreaClick.js:82:6 08:02:13.497 in getEncryptionFlags, gSendEncrypted=true, gSendSigned=true enigmailMsgComposeOverlay.js:1718:13 08:02:13.522 getCryptParams parameters: from=0x07C3FA21AE77B98E, to=, bcc=, hash=SHA256, flags=4802, ascii=0, errorObj= Object { value: "" } 

, logObj=

Object { } encryption.jsm:86:13 08:02:13.523 getCryptParams, got: to=, bcc= encryption.jsm:125:13 08:02:13.523 getCryptParams returning: encryption.jsm:178:13 08:02:13.523 Object { sender: "0x07C3FA21AE77B98E", sign: false, signatureHash: "", sigTypeClear: false, sigTypeDetached: false, encrypt: true, encryptToSender: true, armor: true, senderKeyIsExternal: false, to: [], … } encryption.jsm:179:13 08:02:13.533 sendFlags=000012c2 encryption.jsm:358:13 08:08:38.772 OverrideError: An entry font-size-label of type message is already defined in this bundle 08:08:38.772 OverrideError: An entry window-close-key of type message is already defined in this bundle 08:08:38.772 OverrideError: An entry startup-label of type message is already defined in this bundle 08:08:38.772 OverrideError: An entry focus-search-shortcut of type message is already defined in this bundle 08:08:38.772 OverrideError: An entry close-button of type message is already defined in this bundle 08:08:38.790 OverrideError: An entry font-size-label of type message is already defined in this bundle 08:08:38.790 OverrideError: An entry window-close-key of type message is already defined in this bundle 08:08:38.790 OverrideError: An entry startup-label of type message is already defined in this bundle 08:08:38.790 OverrideError: An entry focus-search-shortcut of type message is already defined in this bundle 08:08:38.790 OverrideError: An entry close-button of type message is already defined in this bundle 08:08:38.904 OverrideError: An entry font-size-label of type message is already defined in this bundle 08:08:38.904 OverrideError: An entry window-close-key of type message is already defined in this bundle 08:08:38.904 OverrideError: An entry startup-label of type message is already defined in this bundle 08:08:38.904 OverrideError: An entry focus-search-shortcut of type message is already defined in this bundle 08:08:38.904 OverrideError: An entry close-button of type message is already defined in this bundle 08:08:39.500 NotSupportedError: CustomElementRegistry.define: 'conversation-browser' has already been defined as a custom element conversation-browser.js:853 08:08:44.155 Leerer String an getElementById() übergeben. browser-custom-element.js:411:22 08:08:44.593 Anfrage für Zugriff auf Cookies oder Speicher für "<URL>" wurde blockiert, weil alle Anfragen für Speicherzugriff blockiert werden. 33 08:08:44.593 Anfrage für Zugriff auf Cookies oder Speicher für "https://addons.thunderbird.net/user-media/addon_icons/0/71-32.png?modified=496f6304" wurde blockiert, weil alle Anfragen für Speicherzugriff blockiert werden.

...several messages of that type...

08:09:48.934 Anfrage für Zugriff auf Cookies oder Speicher für "https://addons.thunderbird.net/user-media/addon_icons/987/987924-64.png?modified=ef8b476e" wurde blockiert, weil alle Anfragen für Speicherzugriff blockiert werden.

08:14:59.253 in getEncryptionFlags, gSendEncrypted=true, gSendSigned=true enigmailMsgComposeOverlay.js:1718:13

​

perpetuum-mobile
perpetuum-mobile Sorunun sahibi
more options

If I try to use the PGP key below, Thunderbird 78 refuses to use it. It does not produce any message telling about the reason (which would be an useful hint to the one who issued it, what to avoid when he creates a new pair of PGP keys for himself). The message when trying to send an encrypted mail is just:

"Die Nachricht kann nicht mit Ende-zu-Ende-Verschlüsselung gesendet werden, weil es Probleme mit den Schlüsseln folgender Empfänger gibt: ..."

Then it tells me that there is no such key. However, If I go to "Schlüssel verwalten", I ca see the key, its creation date, validity date (still valid) and its fingerprint and all other properties, which I had set to be trusted in TB before trying to use it, because I already have checked and used this key before. Nothing with this key looks special to me.

Thunderbird68+Enigmail could deal with this particular key! What's wrong with it:

BEGIN PGP PUBLIC KEY BLOCK-----

xsFNBFUj+C4BEADGwHwDjuWQr4bEP+NMf51RUyY6fzHkZFzNjmYl4j6VVA2lUBl6+6IKMqYQfwcH 7DVRSplncpGKaz5+A38wKPcMnR6vifxu5oFIuu6/6lOuGWOSGgd+TIiliseygsww3xxHwjQQnnom 0SW/jRHOfPTWD641bNBUo5QFqQvnHCSebVnKbn32vTAvwdKXdpSdGLQVKyGIbPpyJ7KA3p61icUW H1pHqklVUia1FrQyESIUmDrW88QxUh7FuPOwyYAiBKWnTtwQunh9WYYnrM1sLc+F7jLWhm1U26AL E9UvhHdJkuMK71H/o3Mykx5OnDLPu1P/+kD9g/Wh/1+D09DVWaoFsX07pLEMO+5y27UsCWCuubMG MDkLTF4aimOLH6iWtyVaRpIYTd0wjPSPWsCFu9KCbXQMJag/PY/R7HI3ZfNn1mR5T1jcSro4SAMD bgFaMxk86wl5S2F+kzleerCY7SAe9UMKpoUxYWUcQhO5+KCY5z75gEXh8+LURXwWWCgpmdZvDAUu /6VH5t0h3+ZxZuKn62PNdMIJ9gHsE+3gi0RWYssZzf87+X2EruhfVfFyDYTKzf2A0kREHVDOXVh9 +CQOjRD+O040UY45Y5XvnzOyn3TkkBAdkT8Ra8aS8fOIZ0NzPAGko2lXN3QUlRNqNGspwoXcoCbM Ng/mAZF+1StL6wARAQABzUVLYW56bGVpIEhlaXR6ZXIgLSBSQSwgRGlwbC4tSW5nLiAoRkgpIEhl aXR6ZXIgPGNoQGthbnpsZWktaGVpdHplci5kZT7CwX8EEwEIACkFAlUj+C4CGyMFCQlmAYAHCwkI BwMCAQYVCAIJCgsEFgIDAQIeAQIXgAAKCRDNkmWlqLIDkOyeD/9ogeOdQ2gR05T5iYRs5lQHywXS /AUFZGWSzyIWJYP3NZcjcVjhOZB3MSiqYrXQ3HWRUmTPcwdlEF1GdcxWxryV0bXzKFDTUegcsb3P XvqqZ1yB3xOVgPouReHwQkEHXCrL9/wlxV8GwEwxLjUj+TP2tKdX4BRJ91Hnmgi4qLi8pCxgdagc pllXuN0Ig8lMVgaX0mOGVfc7jY1TktKjqKXVdak0dTFvnghbDiwuarlWWCIfNTj2bxz5HFqNI5wo 1X1qOGqzvUy3N2ZS5QL3l2jrrWOajBThZzQ3BlM907pBeVWzykf0R77QbyGnWT0cF364xWz9SK3f E7uNgGFSNTKGjKJX1uKc+ezxCdtngOTXB5MOEqG+6+f6qWi8You9GNqWKaf0F2nmxZCouZXsMEPl cduGU11syli6Cjrm9tfDVCBP/MS3AOGnxWOuTmZa8DBuYT1mJASP8AoeVahJfpgfwP3QrkGp99xm oeZ4sbMeOfxEZIoVzaAX6FnqOFEFlapKwwI5Sp4ilwBEFsFgxWupbhTe8Y0e+eViSoh1nXNpiq/z zAKenMOSO2pAM4N/qp7VXiGVO9UXyuE8wceuSM7QZHV7Fb8iq6PFIMhy3e7lKek44EWxLShtlL0K xIq3hU6vSz833uRHRrY5Pz/LQa6XuASB2JC4IIaTNkv7V8I6EcLBXAQTAQgABgUCWmdIVQAKCRAH w/ohrne5jh+qEAClqxnd4M8ODPfSCKMPrP84W2yJWtHzE3nB8+Za9A9GZx8BsTY285vieVsGXCt+ s1dTCI0bT4yQbP1SFh2D46RcxBf6u9SU6OTwT/AD/l/wQGG2iklpPayc4tosyTTb4eENoSpuCMc4 AzIfaLhRGGqVQKGNsmaap2MN2lCcah1fT8MmIr9522dhuqBkrvZcPva2D7rXjHXBrWnUzhqzKA7N 1KbCKloWliN9Dve7UdVTxP/CZUnVnadqxzJeIjQRzAXvZbFRuWHnTs5vk0c7X7jb7ydsokhbbBUr BCQzxRHnzBcaj8WKd8mW81dH/WfS9LEOAKCmmeR7pe6dD4Iej6U8ts1jvS4wGfaFVuUzaKZuXinM mQvwxLxpzQwC0U4XgGOtLRVYznSVx+7LDpKkJ3EKCIq4yUxv9sQHtnQpMeHurEUka96AGWc+YCWh MMEI11L2SpwoaJK/kRoqCDv32Pm7FNDTFtWmWU+R2MMgFs2FaSsAJ8N+B1zT3m2ncvcxax2k2Pju xhFYzPavboUsjoITjxkaQxElGP4nmZOX4CYntB4k2BXjIrHVmlQkZ2EFSbzRQF9w/pHipwcZxVwU ADKKlLIQNcaOMz4ptLNZeiiVUVopZ6rKw7AVEjYs7oDkIgXXGcThEnmBs82yKnakJy7fFjBee1yw 7oYUtwl2FlGirsLBlgQTAQgAQAIbIwcLCQgHAwIBBhUIAgkKCwQWAgMBAh4BAheAFiEEfr84h9RW uwSEA0ebzZJlpaiyA5AFAl6LOLQFCQtIdAYACgkQzZJlpaiyA5CP1Q//R0zzeYOatcOsxLZnkvG9 GEd0q6lNKeyFcmjnDZiTidNt1LemOfjEcTfEKw6OOwBzILssnGbNdj8kQmCq3JsUIwgTimkT+41f 52IBt285Ty3fuS4Low5DlthA8xBF186uKXqjGaz8YDE9pkawEqQxXdAuIBa6A4AJUDXB+8XHZKze nNuQNgtzThkeT1vbArO0bfxSZhJPmDi48yPFdmj6zUqmh/a8UkTRCxCuo8skIWKPfNSZQo6jcJrf 0myUmBh+T2VKA4bFeZxldlJT6xG6sh0hsGLkHKJUrtFslG5xYo/eSh0G1EPBo+Cic0wycrSaFrg8 DInfeT9AvP5tg+uKESMeclWtduvBXivwxWgd72CEqh8Ln0f/tpZ/0IcszVDwlxpy81YsSWln7FR4 U0t16ZVfxjs63MKWXYEOxA1gopEfR/aM4APOAMh2qiyhabmrSPxiRpjwItd10ypdmehuBqN4xFm/ X6qw1jQdWZcx264+Cu/q6+Ll96jMfHXHm08LJOy2y6yFrZn6lKFtiOYs9hT23rilcYweb5p7XPzA yJTgba0D4iUN5YvsmaIictzkLkjYxZ0R6iS6xvAqP10h45l84mSCkrJ8ZQtzZVr/U7jyBonjhnfO B9rQpuFEK8Iyfb08lJtkIe7N6PRZQenAabqqb3tlaISHGzAVFG9r0w7CwZYEEwEIAEACGyMHCwkI BwMCAQYVCAIJCgsEFgIDAQIeAQIXgBYhBH6/OIfUVrsEhANHm82SZaWosgOQBQJe8Iz6BQkTMpZM AAoJEM2SZaWosgOQ+9gP+wZElqJNpfAOMIT/T9fh+fFMcniiUwChysba4TJGCpw51NAR+m4/9XTy B4A9FVGneH2UOZveXz0B6I2TtZiAW+DtywZ5ozvPfiI3bmL+n+jWdNnbmtXGP8E9JlCFtuLKgAMC QSI3ytp0ANmNei/s2SeqQtrT1dwCdJcX2kAJNpyMvUv3u1LYFQJDLH7k/ZkbX661p8zJOUS+Gm8M IHkz2Ixl3B0OKO1mAZMZSG7KpladGQ4XogkcdPce0foeL5U1oG4nYixGdAArRzJs8YyagHRkMQ+O 8LQ7ffmc7V5fqATC54BeWkNR1PzyiBsIrJSh3dg/okJADKqg1EQ8U4YEeGcsAOBeCjfYS35rWGgU U40d1RaeNA6RSosqz7ybaIsk0t59no90dOhfaeFAJ1VJeFK6d5VsTfo5hGzIoEXBMofQD0q5mT8b ijnjwNrE5GaUVxESSaXjGGC+30DnYH8C03HxFJ986FLoLSmnvjKoM/0YQOYbnblUAFrjmII35wLT JVrLk49Sg833Ztvfdt5KWrue8iHSmyrGsFdkAYOPkLhS7hpUuumc1fynbyE2Mhi5tBbU1NRES2jU i3tafGUFhBGgluW6LVpxV6tPStDbqMXb+XkubFremIMS5guPf+gGIS6Wirwrr2f67CV1foXXaHRH tV9H2JU35GJufaeRdEYvzsFNBFUj+C4BEADHD5AkuL3QXXjzkaBLj107GYMgkoppF6ml9Apb88QU IB6QQsImWLcObXChrAbunsAuB7GzwagomU5auYnnCB7QsqReag9hgjlyFs3GUOmL79xRNcLtlvVb DhimyVrJLTNKG5wxvYJYY9+QkbWDqCjImzpAZ3DjaxCcxkJYLWTUpwXymXBB9faS/0b0wgqfXOWf AG7YD8D2tAmwnN1HjNg6U/k80fQ5pP1ecIr8yY3AV2IyqHbYIQ9VL6VKBXpVpQTcA14Cm9ndLRIR kRyH33mMPvGE9FvYs5Gka4bYT1BvUmHjdkC7sRajwJ1TBozufjWrtWHs84bNbNR0iF65TxtU9iAU a7o6FlbJhvVMhBw6wqbiUJ6Mk8nKlMN1PU+nZkSRB48tNANO60rYRd8R+CwYkTYF2t7wp/Bk0/EW woW2sRWvkTIRvVgYhCxeFujJgCHL7ElEn2f07cq1GwZE5WilY+Pw9PMsIa3m0Atn7fnMf1CJddH7 bBTZvtj7nbgY7OPC3asow9b5clj9vVCo2Y+P1Y1jNRQnteib4D4s9GUficwjgZrYCbbW2m72H9/q eqRPVxy3OaT5aslAHI7XC7S0DC02cyGh/6VMGkEmi2AfpRY3v77i+whFFz0xAgwqOxNnkTVdoaER F+VucQ6sQpAf0JM2CD/tOXECOc3U2NgcUwARAQABwsFlBBgBCAAPBQJVI/guAhsMBQkJZgGAAAoJ EM2SZaWosgOQhRMQAIu86Dp4Pr1YkOu2Ri7L/CdI+vlq99B/YukioujTTQSdIcfT0/ixuMpU/X9+ rzFP9PqpVyBgkjW59fMx9rLcG8JQ9sxUnuE5rOOrGarxOu5kZwWvX6l0DoN65baur00mb6w9lyyT IymzcLlsot7o/Smb6qPm8+sda5vT+kTlUHXxqaXFQCELeMVjNfrUMttJ85QTov5agrBgQWajNTyE UlnXAQgpjpzCLPfrdofy2LWPcfDSNc2miLBqRoCjcsdqB/LiKubF7msWeumDGNR4ZMGd0owPFjiw UmFWmQqcuRNbb+vuD+mgT5tGetcAfapr2GPQZZLoyOLtFKNSGlo0VhiSuK+pjkfwipKB5tHojvDT 5u1j/ZJgRtc1QjQ7TA6iJ8kMaf4DN8JARB5RPUj7hl/5GF2CUe+OTNZoEWnJeCrmVXjw+HSrpg90 snWqMNY+dleCiMSaVo5fmNCVWw9XM7KwF8vyrL789P6jEgIuAdkFUQ4mdgcns0WCJohvOYGpI5Qm elrbf6EiROk0Nsjyy261EJWwE1AivjzeNo20XZE11dj6fVHn73XUI+SuqXBvMaNm3Id7Mbt+G50U iwgJ5JAuNq+83C5wC3nYp3RSFBM4gYqVUEsLl5vFsutU2rt5NOOLGj/JBhN4FuEDWtuAwO0gL76E OY+aVP2VkrEQlREYwsF8BBgBCAAmAhsMFiEEfr84h9RWuwSEA0ebzZJlpaiyA5AFAl6LOLUFCQtI dAcACgkQzZJlpaiyA5DHlBAAvRfcWL0RxqM2p5ZT2T5KpzcsKWOlgQnVim0IIRTsEbLXNcRTstJj dfpISNLtLv/80y7uk1hW0ZSPaaYKdl9yBFxOAj9vhfrtWJnbDWt1T525cB5zxB8KzOGG1Q+qXKxR 5hCsgWdLYaw304bdwyqqpjvor2QOIuLLPsskg/owDeaWoiT9gGpIo1cWfB6n1LrLAavkaTIX+o4O CvqhbV5Ud6CHxzok9QYwX9XJ+6N3CRXxaOcM6vjr2N1fUA2sD/70YvYwPXyo4JS+/Cdrfq6OCVTW vvKsH1ZGLWvoMwxStGD0nUDlSFiGJ47m3e2J2WsqmCaYP6EKpC6tNS8Fss6cmNKqL2u9cvoPe1lH GsSozfUzdQO3q7g/XIOqes1Aj201UW5GsOfuDZI6MRff7hTZAUioJn6Bj/zbEJa5rea1iz3LkA1+ IJizYDTPBpKNQhf3phtaJs+6XYpe3GirGyyv3Ei7eSsdk1lXJ45t9WXJ0WmzRQApgsP0AZAf5L78 nm9knxRnJQQkqiEihq6ujsGy0o7dOu6Akwij3KefgRs1FL6LcHrvMGw3DvXHj409fLCUAY71H5cE CewAZGytwaVwHtCid+vZUE/jaAaTPUBzaDSnFecrp7Vy95485mDubS7DJHpsp4Tu5AS6hNjTt3P2 ZLYGN4WI/J+8EKHG9PXTXk/CwXwEGAEIACYCGwwWIQR+vziH1Fa7BIQDR5vNkmWlqLIDkAUCXvCM +gUJEzKWTAAKCRDNkmWlqLIDkLGzD/4+KMN1dreu6lY/p5Bl1ZbuytzxKO92Zp4NtjvuVNdmgVKA PFCajvOVV03U02O+eQwEyP0YfuJsFCXPyorzXmdxEzf4lb20fUlWiBQ2lYDg5fkxFwGwst8TDZdm 06e+cUOBltalS34+ZuX6168W0y2ioo6JhCatCrbl6sGlqD8Ldmvl9xNhhsCfsfGkJYt8nZKWqQyD /cDPr3A0mX3ivfgger37PiuQAn6RUlH+49Ni4EuioPXe+9dU6b0t9DtEaLIVvmVxCW+fQzI11m3r CjTxHbF5Dq3476eIo6kb7JCoxliDYHmamJd5EXbjxkwMSdbTYWsyidxJNJt34w5lbSqptGzdf0Rz jVZWCU0D4hQwUcqPSjob0YQcbaS0j4VPIXnGICY7QqjHJfJXKHrzfYL0UjN/BImeFPaxbpm8VF5S FZFOYs2muTvcoefgvCSBaNy7WESx5OpeiA4EOU0wDjjDgcCcPFzTC34exrCOYUhQLKanYkZtq4ow kJUSu+fVukA/vlBlX2v78Rk3tjpXr7p9VaCZd3Dry33YmjtCo67rDqxeCJQA2vSrF5oHVfgiczC3 rJdV0cBjoQkbaxDBq4QETBGQCIDxti7GdNDLnkeTWrBFXhgGaLsSv920Utckd7hC5WvzZp3bVX47 hgTieYOGQAiTSuCf/ZKKO46niSxyWQ== =ny1j

END PGP PUBLIC KEY BLOCK-----
christ1
christ1
  • Top 25 Contributor
more options

The key doesn't import for me. Is this a key with some sort of advanced structure? https://support.mozilla.org/en-US/kb/openpgp-thunderbird-howto-and-faq#w_what-types-of-openpgp-keys-are-supported

perpetuum-mobile
perpetuum-mobile Sorunun sahibi
more options

There is nothing special with this key. I do not see which of the offending properties is in it, but they say nothing to me. (It would be helpful if it would tell: thsi key can not be used because ...). This one definitly uses RSA with lenght 4096.

I can import it and see these properties:

On the second tab I see that this key has been signed twice by the issuer (when it was new), some time later by myself and then again two more times in the last year by the issuer.

The issuer's actions were all done with the same key ID (the last 16 characters from the fingerprint itself). My own signature was done definitely in the time of pre 78-Thunderbird. i.e. with the old plugin Enigmail. It uses a key ID associated with another email account of me.

christ1
christ1
  • Top 25 Contributor
more options

That looks like a pretty old key. My best guess would be it has some ancient cipher and digest prefs. You can check the key prefs using gpg. gpg --edit-key <key_id> showpref quit

Compare that with your own key and see whether there's an overlap.

perpetuum-mobile
perpetuum-mobile Sorunun sahibi
more options

The key which I could not use any longer in Thunderbird78 has the following preferences:

[ vollständig ] (1). ... information about the associated email address ... Verschlü.: AES256, AES192, AES, CAST5, 3DES, IDEA 

    Digest: SHA256, SHA1, SHA384, SHA512, SHA224
    Komprimierung: ZLIB, BZIP2, ZIP, nicht komprimiert
    Eigenschaften: MDC, Keyserver no-modify


The key of another correspondence partner (which works) even has exactly the same preferences! But this one has the same email address connected with itself twice, the two output blocks are marked with (1) and (2). Apparently this is the case becaus he has two spellings of the non-technical part of his email address. For comparison here the preferences of my own email key:

[uneingeschränkt] (1). ... information about my email address ... 

    Verschlü.: AES256, AES192, AES, 3DES
    Digest: SHA512, SHA384, SHA256, SHA224, SHA1
    Komprimierung: ZLIB, BZIP2, ZIP, nicht komprimiert
    Eigenschaften: MDC, Keyserver no-modify


I do not see anything which has to do with any of the bullet points mentioned at https://support.mozilla.org/en-US/kb/openpgp-thunderbird-howto-and-faq#w_what-types-of-openpgp-keys-are-supported (except perhaps the last one which is something like "anything else", so this has no explanatory meaning other than Thunderbird may still have flaws - like any other software).

You asked me to check and compare the not working key and a working one using the Linux program gpg. To my understanding it deals with its keyring and Thunderbird has a separate one. This is supposed to be the reason why you have to redefine the trust level for every single key in Thinderbird. Does your hint how to check the key rely on that particular still being in gpg's keyrind (which is the case) such that I can adderss ist there by using its KeyID? I could not submit the whole key to the program gpg But it was identified there after submitting the key identifier, which was 0xCD9265A5A8B20390 in this case. - It's just a question of understanding how things are connected.

Do these data give you any hint on what goes wrong? Or is it a bug which should be mended?

christ1
christ1
  • Top 25 Contributor
more options
The key which I could not use any longer in Thunderbird78 has the following preferences: Digest: SHA256, SHA1, SHA384, SHA512, SHA224

SHA256 is the first digest pref, which is good. But SHA384, SHA512, SHA224 are shadowed by SHA1, and hence would never be used. SHA1 should always be the last in the list only to be used for compatibility reasons. So ideally this would look like Digest: SHA512, SHA384, SHA256, SHA224, SHA1

Note, it's nothing you can change, but only the owner of that key.

The key of another correspondence partner (which works) even has exactly the same preferences!

I was looking for the prefs of your own personal key. This is one is unrelated to the problem at hand. The prefs for that key look good. They are by no means 'exactly the same' as the first one though.

You asked me to check and compare the not working key and a working one using the Linux program gpg.

No, I was asking for the prefs of your own personal key.

To my understanding it deals with its keyring and Thunderbird has a separate one.

It is correct that as of v78 Thunderbird is using it's own keyring. However, this is about the prefs for a particular key, and not about which keyring is being used. I don't know any way to check the key prefs with Thunderbird, but you can easily do it with gpg.

Whether key prefs are a problem or not I don't know. It was a guess, but so far it hasn't been ruled out yet. There may well be another problem with that particular key. But one step at a time.

christ1 tarafından tarihinde düzenlendi