OpenPGP gives "Importing the keys failed"
Hello, i am trying to import a public key. on the OpenPGP Key Manager, i select file->Import Public keys from file but i get the message: "Importing the keys failed"
I use Thunderbird 91.8.0 on windows 10.
my OpenPGP log is this: 2022-04-15 14:31:28.690 [DEBUG] armor.jsm: Enigmail.locateArmoredBlock: 0, 2022-04-15 14:31:28.691 [DEBUG] armor.jsm: Enigmail.locateArmoredBlock: blockType=PUBLIC KEY BLOCK 2022-04-15 14:31:28.691 [DEBUG] key.jsm: getKeyListFromKeyBlock
and nothing else.
The public key is this:
BEGIN PGP PUBLIC KEY BLOCK-----
mQGNBGB0F7gBDADGkSvjulmdxY58N/QmTNH2Sr5kfRjSec2+GS4CWFRk3rQFyat2 Xv6AUX/9cYuRkL1sYtOF1xp6iyUcMrvOuEbLNsQbeHSCaC2ZTRahfzM0UVNAWkf8 knAjoC7IzCyMAbr3FQxd29flrXhAFmQklotuAGrHbQQprMaBuzY9KzfSnU/OxwtW s9HR9sRfAQsKd1edig3YyS6ZHjr6lJlaae+HfZCDcSKGo9IBmX5uHzHuspneqgeE /970IJvrtpmMusTsBO30zOiRMCGrrI2rOO7/rEZrfVysSHy2BxQg2qaZH2EkvIGh l0FM8wwIYkvw8Be2/Arc/XbLwweYgrpL/oBUwYCv5D6Q9K6XPTXDnBMmGinaI3D7 A4kr5AP6d1L9QiDZ4xUduNuoWOr9IWnc50/dhWsrkoxjuvC+NMudkrRluXegXjDj v3NxEQ55lO4kprKxl+rXPrL5aXTtajPYNYkGwnGu1bYW+qB/RX17Jv7t7x5JI0aF cGCsQTUb79+9OkcAEQEAAbQsS2Fzc2VtIENIT1VBWUFLSCA8a2Nob3VheWFraEBu YW5veHBsb3JlLmNvbT6JAdQEEwEIAD4WIQQjMPbHK1ck0iXq5Z3G3N+sLQsFnwUC YHQjUgIbAwUJEGMVeAULCQgHAgYVCgkICwIEFgIDAQIeAQIXgAAKCRDG3N+sLQsF n2QTC/95Pw+SbA6s3bIkDPypFs8El91Xux77FjZKZj7HlUJU5cx13D1kuukDny96 F4a2mI0/CeJjrM182/fGE0FOWSK+MKMgP1EyvnWslCQUnOgMo7w7G9CzWmug3oyG 9PuBHTopVhSUUUBO6iEoGiVneJm0ZJ/pMwb5mDJSdmERNYOkspeO0fX/L4L0bFos FyYNR+h/n+TH5rAj+bwChsENL6npmx0xtxDcm1tstajeFZAgLnPD508gOZVIXTxj oTZ9tkmSY5Fc81o62IU2WJcZPrULuJ21JkTcTJoXzwHLUj51M3m7J4i4pour02fB n4DHcnv35Si67LNhJFx89NsRt8rm5H3AHPnJHw786LJNWVyUXMYNdclhTdlu3alf iT/32dr6VWV9z3OXPLStQYFeRMj7HIJZq5CP66WcgSKenH+quDUIkoe98AWbWDIe d7qV466y3LoQEKoOTgrrstCXvtuadDYpdRzWtYrOIKJDZQBjd6E0mjClG6+JWc1f lD+FjMK0Lkthc3NlbSBDSE9VQVlBS0ggPGtjaG91YXlha2hAbmFub3hwbG9yZS5s b2NhbD6JAdQEEwEIAD4WIQQjMPbHK1ck0iXq5Z3G3N+sLQsFnwUCYHQXuAIbAwUJ EGMVeAULCQgHAgYVCgkICwIEFgIDAQIeAQIXgAAKCRDG3N+sLQsFn42EC/0ehPfE zAJKpZcHPfP6Gl4jeF8yc1ZihZ8mRQYMVuVNirNvENBf4tdyHV3hQkqF1Zys/CQQ R1xmvf0r3ofH7sAywiVBro7ehfJuRErKdXTcOHiukZDhaRCsTMld5Q41eh8e7mpi hk7xA+BUGmQiz74YhHdjBNr932tKr/43QFUatIZRoPuwsm/0ig8jJMIidSqKZJDf D4NEarRkKMEUATXHcgAXMhculHhtlBZpKs3LCvGiu2TTqy+W/ZBESXyieKfknxrz aGWx4riaiDWZvESbeCyxThBP5Vs0gmpxkZFpYEbHkl2B8JvNewjFfKITBHcHP+vG WfsbYeC7xVyvnWux1fo1c/HBOXQzzbzUVRAKm4IFw1WXiNf1syuk8rBPz0P/EpWu Xv5Vr2tHGFyzgmSADA+4kdo2NzFVR6WyPLc9X9JmMwJnHhMYQQl/ff8wNyZ5c0Zh cwhxt1qijl9NgVssbXj10oxC9FDwX2hCK3QPiduKUcvm2rkZ+px4FXtcyPe0Mkth c3NlbSBDSE9VQVlBS0ggPGthc3NlbS5jaG91YXlha2hAbmFub3hwbG9yZS5jb20+ iQHUBBMBCAA+FiEEIzD2xytXJNIl6uWdxtzfrC0LBZ8FAmB0JBECGwMFCRBjFXgF CwkIBwIGFQoJCAsCBBYCAwECHgECF4AACgkQxtzfrC0LBZ+GUwwAsG1rm67i4N3Z yhiUy4w8e86U1/djd3JhWjUBB4L1gSWUWEdTXfdjBb3hmEwuhjhgc8nGuXA6YbYF ANswLhD51ATxoaNefp3V2hl+WKayAiF6s2W5UJ+mqSfdiXchErV4bnd5hWx2PCOg Tk91T4WOu3IHG+6bfdhpqLoiHbIXypjsAtfjQq2D/+r5UvMJPecy0q2O2lBNgKLc HS2wDJWscOy81XMgrmjjqtFVSBO+b5tYq6hn/Ao7pA0RULjrWvnlVBRuawFLRvNL 1fASjF+kH5OODHRu7V5BkFV1mIlJvHhbjEzCk0vGz5m6DhwmyQntIKj70xsOnEKO IuxOyXLJR+ayFNrZsDjlz3+D6VXXo6ab6g7uCbVIE+wYTSwdWOwgoHug3lpWdkb8 Hrr4HvdoQ/evWasJw/qsMrAVN9M4azwxxbfn4Mw4SR1UoII+KDM4UN4ESNDqAC// 8lvBvpyyDdtHbvCMgkFiPppaGgn1EAogGVxghkGdofUcxcVdkYTluQGNBGB0F7gB DACrOqQVtSIE6Tuc2w6QxxoYtF2OTN1lMxP86BC3J18g0nUZTiNRZjOdQ4Rv83mY sfcyHzlF0H1jCM+9ZUYfFhxW6E+Kta+RpGwEE/md0tbDARVZw1sj/s8BlXV7mW+T AXrebuSclnO+E3X+OM39lNCuO9KzGizKEmQyNQN1Rdeow76E3z7pAk6oJHBxiyNv fiCxMlK9ycCxO6cYT53Nnc9MoKf17kzODXnaDf/YL6x3Utq2arznTiHe+O0YT40z rpo1zGOd3/qU4Y3QTwLMTIDcrVU/+WHi0qzox+n1DM07QoADJtjBAEbRYmgu5vTd kg3OM1gHuG1Yzk40lnkHx6wLaSzSEsYReYEl39LQFFZhghb2Xl+b8gUUcCTs2Q2B 91vaTt9pNuK1Wz32yVRN5Wvj4dKh+h/9mfc03bHxOuvCmR9Xkr9EhCVrbRObHTRS rwcMFK2P6C43SxYxp11oFOBt2UXUaS7D77mYW45rdZHEiA+ZZJdlcEE3QuFI/Imo jOkAEQEAAYkBvAQYAQgAJhYhBCMw9scrVyTSJerlncbc36wtCwWfBQJgdBe4AhsM BQkQYxV4AAoJEMbc36wtCwWfCtIL/RWtLYhcfeOjUCW+MwyUKlpFn9smx74Uqioy 0nEeISZoPS9BzquetSJMU3RcZzCM3RCuKvbxmYnEpYg9Tg/M4xlFipsbUR6DPNFt ZapUWKCkQovoovn60CBGdo/yBkOdSQHitc5h7rFnHb9JFs76UPhHHP40uGkpuQe/ YQbGriReoS/puTakcb5YoNNKCKIdhtMJhVHDskpZkMOBKe/N+QfsOS/pHQj110Ib bZs6EeVFSd2jICbWz0jkc8sWyMI0eq1YqS+RuA5U9y+I01xukH8d5e3m8P9a/wAa vFudPGK6/YHYxOFSBYSS8r98utlZvDiSakywsEbSa7eC3Ui1Hiuo9geVe968/kVq dpTFMs+deJXnPC5lFd5gduvFLgcUo9TYdj/zCLyekF8sO62gsbRqvooorCdIvJBi 5TjXVWbn+PO3TLEilWQh4sBy4AO06sTM5CRHRcuCBB9+3PlztZWIDJUfWMzDSRsj S+5FfEFv/M5by8vQ1MwCkLBowaBsNg== =/0So
END PGP PUBLIC KEY BLOCK-----
Can you please help?
All Replies (17)
I just saw in another list that sha1 keys are no longer supported, is this a sh1 key?
Hi, No, this is an RSA
No, this is an RSA
This is not about which type of key is being used, but which hash algorithm. As Matt said, (RSA) keys using a SHA1 hash are not supported anymore.
The public key is this: BEGIN PGP PUBLIC KEY BLOCK-----
The separator line should look like
-----BEGIN PGP PUBLIC KEY BLOCK-----
Same for the 'END' line.
christ1 said
The public key is this: BEGIN PGP PUBLIC KEY BLOCK-----The separator line should look like
-----BEGIN PGP PUBLIC KEY BLOCK-----Same for the 'END' line.
Thank you @christ1. Indeed the value is commented line is correct. Is just shown like this while i pasted here
You may try again with TB 91.8.1 to be released within the next couple of days.
HI, i tried with 91.8.1 and still not working.
It also seems that the problem with the SHA1 signing would not let me see the expiring date, but in my case it does not import it altogether.
is there a way i can debug this?
Same here. After TB update my PGP keys failed. After delete key from manager - cant import it again. Public and private - failed to import. Cant use my work mail now.
Okulungisiwe ngu Andrw
Andrw,
please start a new topic for your problem. https://support.mozilla.org/questions/new
is there a way i can debug this?
Is there anything in the error console (Ctrl-Shift-J) when you attempt to import the key?
Is it a personal key of yours? If so, how has this key been created - using Thunderbird, gpg, anything else?
Is it someone else key?
What exactly are you doing when importing it?
hi again, the error console gives this message: rnp_import_keys failed with rv: 285212673
This is not my key, but i know the guy that created it used kleopatra.
In order to import it i go End-toEndEncryption -> "Open PGP key Manager"-> import from file (attached image)
In order to import it i go End-toEndEncryption -> "Open PGP key Manager"-> import from file (attached image)
In OpenPGP Key Manager - File there is: Import Public Key(s) From File, and Import Secret Key(s) From File
Which one are you using and why?
I am using "import public key" as the one i have is a public key. also importing it a s a secret key does not work.
In the screenshot above with the error you do attempt to import a key expiring on 4/15/2032.
You also posted a key above implying that's the one you're having problems with when attempting to import it. That key imports just fine here. And it expires on 12/28/2029.
Are these different keys?
And you still haven't responded to the question whether your troubled key uses SHA1 hashes. https://support.mozilla.org/en-US/kb/openpgp-unsafe-key-properties-ignored
In the screenshot above with the error you do attempt to import a key expiring on 4/15/2032.
the key expiring on 4/15/2032 is an already imported key and is different from the one i am having issues and that i posted here
That key imports just fine here. And it expires on 12/28/2029.
that maybe means there is an issue with my file and there might be some hidden characters in my file. Did you save it in .asc extension? I will try this on monday as it is on my work komputer
And you still haven't responded to the question whether your troubled key uses SHA1 hashes.
i don't know if it uses SHA1 hashes. It just uses Kleopatra defaults. I don't even know if you can change such a setting in kleopatra.
Kleopatra is just a front end to gpg. You can install the latest version of gpg4win, which also ships with Kleopatra. https://www.gpg4win.org/
I don't know if the GUI allows to inspect signatures in that detail. In any case, you can use gpg to do that, see https://davesteele.github.io/gpg/2014/09/20/anatomy-of-a-gpg-key/
If you do see 'digest algo 2' in any of your packets your key is using a SHA1 hash.
If this doesn't get you any further, I'd suggest you ask about your problem at the TB e2ee mailing list. https://thunderbird.topicbox.com/groups/e2ee
We have learned that the input key file didn't have a blank line after the BEGIN PGP header line. Having that blank line is currently required, or our OpenPGP engine (RNP) will reject the file.
Check if that's the case if your key is rejected. Open the key file with a plain text editor and ensure there is exactly one blank line.
We consider to make that processing more relaxed in the future, this is tracked here: https://bugzilla.mozilla.org/show_bug.cgi?id=1768424
Okulungisiwe ngu Kai Engert