Preference to "Never remember passphrases" causes icon to stay in Notification Area, indefinitely.

Bug #397665 reported by Derek White
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
seahorse-plugins (Ubuntu)
New
Low
Unassigned

Bug Description

Binary package hint: gnupg

1) System > Preferences > Encryption and Keyrings
2) Select PGP Passphrases tab.
3) Select 'Never remember passphrases' radio-button.
4) Check 'Show icon in status area when passphrases are in memory' check-box.
5) Use Engimail with thunderbird.
6) Send an e-mail that is signed/encrypted.
     a) thunderbird/enigmail/gnupg asks for passphrase to unlock key.
     b) thunderbird/enigmail/gnupg asks for passphrase to unlock key (yes a second time, filing bug with enigmail...unless it's gnupg's fault?)

Expect: The notification icon to not show up, since the passphrase is not being stored.

What happens instead: Icon shows up in notification area, implying that a passphrase is stored; however, it is not. [It's still there at least 30 minutes after sending the e-mail.] Further uses of my key require me to enter my passphrase, proving that it is not stored.

$ dpkg -l | grep gnupg
ii gnupg 1.4.9-3ubuntu1 GNU privacy guard - a free PGP replacement
ii python-gnupginterface 0.3.2-9ubuntu2 Python interface to GnuPG (GPG)
$ dpkg -l | grep gpg
ii gpgv 1.4.9-3ubuntu1 GNU privacy guard - signature verification tool
ii libgpg-error0 1.4-2ubuntu7 library for common error values and messages in G
ii libgpgme11 1.1.8-2ubuntu3 GPGME - GnuPG Made Easy
$ dpkg -l | grep thunderbird
ii thunderbird 2.0.0.22+build1+nobinonly-0ubuntu0.9.04.1 mail/news client with RSS and integrated spam fil
ii thunderbird-gnome-support 2.0.0.22+build1+nobinonly-0ubuntu0.9.04.1 Support for Gnome in Mozilla Thunderbird
ii thunderbird-locale-en-gb 1:2.0.0.14+1-0ubuntu2 Thunderbird English language/region package

Using enigmail 0.95.7 installed from thunderbird (downloaded from mozilla website).
Prior to an Ubuntu re-install, the problem occured with enigmail from repo's as well.

Derek White (d-man97)
description: updated
Revision history for this message
Derek White (d-man97) wrote :

Ok, apparently it doesn't store it, enigmail/ehunderbird/gnupg ask me for it again; however, the icon still gets put in the Notification Area and stays. It will stay forever if I don't get asked for my passphrase again. If I do get asked again, it will go away until after I enter my passphrase the subsequent time(s) - at which point it comes back again.

description: updated
summary: - Preference to "Never remember passphrases" is not honored.
+ Preference to "Never remember passphrases" causes icon to stay in
+ Notification Area, indefinitely.
Revision history for this message
Daniel Leidert (dleidert-deactivatedaccount) wrote :

Why do you say "appearently it doesn't store it"? It is probably stored, but the programs don't make use of it. This might be, because the application cannot communicate with these programs or vice-versa or you haven't configured gnupg to use a password agent (--use-agent).

If the shown status by the icon really is wrong, then you should file your report against the program, which is repsonsible for it. And that's not gnupg.

So IMO your report is misplaced.

Revision history for this message
Derek White (d-man97) wrote :

gnupg does not handle remembering of the passphrase or the notification area icon.

Changed in gnupg (Ubuntu):
status: New → Invalid
affects: gnupg (Ubuntu) → seahorse-plugins (Ubuntu)
Changed in seahorse-plugins (Ubuntu):
status: Invalid → New
Revision history for this message
Derek White (d-man97) wrote :

Thank you Daniel, I believe it is misplaced as well. Switched it to seahorse-plugins.

If it were to be stored, I'd assume the 'Ask before using a cached passphrase' option, which is active, would ask me to verify using the stored passphrase (as it does when I select 'Remember passphrases for X minutes'/'Always remember passphrases whenever logged in'. Since it does not, the only two outcomes are that it is not storing it or it is storing it, but removes it from cache as soon as the passphrase is needed again.

Either way, it is wrong. 'Never remember passphrases' should not start the notification area icon; furthermore, I should not have to/be able to 'Clear' the passphrase (from the icon) when it's "never remembered". Which program uses the passphrase should not matter, as it's seahorse/seahorse-plugins that handles the entering of and storing of the passphrase, if I am not mistaken.(?)

Assitionally, this happens with all applications. If I right-click > Encrypt a file/directory, the same results occur. I select the recipient and signer keys on the "Choose Recipients" window & hit OK; the passphrase window is shown (and occasionally the Encrypting window sneaks in behind it); I type in my passphrase and hit OK; the notification area icon is immediately visible; the Encrypting window takes over, does its work, and finishes; I right-click > Encrypt another file; select recipient and signer; at the same time, the passphrase window appears and the notification area icon disappears; I type in my passphrase and hit OK; the notification area icon is immediately visible again; encryption takes over, does its work, and finishes. The icon is still visible and stays indefinitely.

When I refer to the "Passphrase window", it is the window with the text:
You need a passphrase to unlock the secret key for user:
"Derek Ryan White <email address hidden>"
4096-bit RSA key, ID F816549A, created 2008-05-23

If that window is canceled, a second passphrase window comes up with the text:
Enter passphrase for 'Derek Ryan White <email address hidden>'

If I enter my passphrase in this second, "backup" window, the notification area icon never appears. It only happens with the first, main entry window. Therefore, a workaround is to hit Cancel on the first passphrase entry window and only use the second, backup window.

I have not tweaked gnupg or seahorse other than importing a few keys and making the selections mentioned earlier on the Encryption and Keyrings window (seahorse-preferences).

$ dpkg -l | grep seahorse
ii seahorse 2.26.1-0ubuntu1
ii seahorse-plugins 2.26.1-0ubuntu1

Revision history for this message
Andreas Moog (ampelbein) wrote :

Thanks for reporting, that is already a known issue, see bug 228309

Changed in seahorse-plugins (Ubuntu):
importance: Undecided → Low
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.