[Kmymoney-devel] Re: Decryption not requesting passphrase

[Jack]

[this time to the list also...]

I'm no gpg expert, but I suspect reinstalling gpg might not help, if  
the default installation has the gpg-agent automatically run when you  
log in.

Question - if you log out and then log in again, does it ask for the  
passphrase the first time you open the file?  If so, then you may just  
want to stop gpg-agent from being run.  I'm not sure where to look -  
but I'd start with .login and files like that, then look for any system  
settings related to security.

If it never asks for a passphrase (even first time after a reboot)  
that's a stranger problem, since it means something is caching your  
passphrase across reboots, and I don't think anything is supposed to do  
that.  In fact, you never stated whether you ever enter your passphrase  
for anything at all (not just KMM) after logging in.  If you do, then  
getting gpg-agent not to run will fix your problem.  If not, then  
something else is going on.

Jack

On 2011.04.05 05:17, John Le Page wrote:
> 
> Unfortunately not.  I will re-install gpg etc and see if this solves  
> the
> problem. Thank you for trying!
> 
> 
> On 05/04/2011 10:44, Thomas Baumgart wrote:
> > Hi,
> >
> > on Tuesday 05 April 2011 10:09:54 John Le Page wrote:
> >
> >> Hello
> >>
> >> Your hunch was right. Thank you for your help.
> >>
> >>  'gpg -d myfile.kmy' does indeed send the file to the display  
> unencrypted
> >> without requesting the p/w. 'cat myfile.kmy' shows the ascii  
> armoured
> >> file, so the encryption is there. Extracting possibly relevant  
> files from
> >> my list of installed files, this is what I found and includes a  
> reference
> >> to an agent
> >>
> >> gpgsm						install
> >> gpgv						install
> >> libgpg-error0					install
> >> libgpgme++2					install
> >> libgpgme11					install
> >> libqgpgme1					install
> >> gnupg						install
> >> gnupg-agent					install
> >> gnupg-curl					install
> >> gnupg2						install
> >> python-gnupginterface				install
> >> seahorse                                        install
> >> seahorse-plugins                                install
> >>
> >> Your further suggestions on where to look within the above or  
> elsewhere
> >> would be appreciated.
> > With a running gpg-agent and the passphrase entered once, I can  
> force the
> > passphrase dialog with the following command:
> >
> >   GPG_AGENT_INFO= gpg -d myfile.kmy
> >
> > Does it ask for a passphrase now?
> >
> > This is more a GPG question and we're somewhat the wrong community  
> here.
> > Unless there is a GPG expert lurking here on the list :)
> >
> >
> >
> >> On 04/04/2011 21:26, Thomas Baumgart wrote:
> >>> Hi,
> >>>
> >>> on Monday 04 April 2011 18:16:31 John Le Page wrote:
> >>>> A great program which I started using about six months ago after  
> Money
> >>>> 2001 gave me very weird reports with incorrect totals!
> >>>>
> >>>> As I was familiar with PGP, I soon went to using the encryption  
> option,
> >>>> which has been working fine until today.
> >>>>
> >>>> On startup this morning I found it did not want to open my file  
> and that
> >>>> my Seahorse 2.32  was empty.  I had key backups which I restored  
> into
> >>>> Seahorse and then the encrypted file opened ok but without first
> >>>> requesting my passphrase.   The problem is now that while the  
> KMyMoney
> >>>> file is being stored with the right ascii armoured format under
> >>>>
> >>>> -----BEGIN PGP MESSAGE-----
> >>>> Version: GnuPG v1.4.10 (GNU/Linux)    etc
> >>>>
> >>>> but KMyMoney no longer asks me for the passphrase before opening  
> the
> >>>> file - it always just opens as soon as requested.
> >>> KMyMoney uses GPG for the encryption. It does not store the  
> passphrase at
> >>> all, so I have no idea why that is. Do you have a gpg-agent  
> running?
> >>>
> >>>> I have tried switching off the encryption, saving the file again,
> >>>> closing & opening the file and re-saving it encrypted but still  
> the
> >>>> file next reopens without the passphrase being requested!
> >>> What happens if you run 'gpg -d yourfile.kmy' ?  Does it decrypt  
> to the
> >>> console w/o entereing a passphrase?
> >>>
> >>>> Any suggestions?  My OS is Ubuntu 10.10  and KMyMoney 4.5.3.1  
> from the
> >>>> Clay Weber package.
> >>> I don't expect KMyMoney being part of the problem. Are you sure  
> you open
> >>> the right file? Just to be sure.