[Kmymoney-devel] Re: Decryption not requesting passphrase

[John Le Page]

No-it does not ask for the passphrase, even after a reboot. I only use 
gpg for KMyMoney encryption, not for email.
If I delete my private key from my keyring, then I get a message from 
KMyMoney '......decryption failed' and the file no longer opens in KMM.
I will now try making a new private key, decrypting the file with the 
old one and re-encrypting with this new key and then see what happens.

Thanks for your help.  John


On 05/04/2011 16:08, Jack wrote:
> [this time to the list also...]
>
> I'm no gpg expert, but I suspect reinstalling gpg might not help, if 
> the default installation has the gpg-agent automatically run when you 
> log in.
>
> Question - if you log out and then log in again, does it ask for the 
> passphrase the first time you open the file?  If so, then you may just 
> want to stop gpg-agent from being run.  I'm not sure where to look - 
> but I'd start with .login and files like that, then look for any 
> system settings related to security.
>
> If it never asks for a passphrase (even first time after a reboot) 
> that's a stranger problem, since it means something is caching your 
> passphrase across reboots, and I don't think anything is supposed to 
> do that.  In fact, you never stated whether you ever enter your 
> passphrase for anything at all (not just KMM) after logging in.  If 
> you do, then getting gpg-agent not to run will fix your problem.  If 
> not, then something else is going on.
>
> Jack
>
> On 2011.04.05 05:17, John Le Page wrote:
>>
>> Unfortunately not.  I will re-install gpg etc and see if this solves the
>> problem. Thank you for trying!
>>
>>
>> On 05/04/2011 10:44, Thomas Baumgart wrote:
>> > Hi,
>> >
>> > on Tuesday 05 April 2011 10:09:54 John Le Page wrote:
>> >
>> >> Hello
>> >>
>> >> Your hunch was right. Thank you for your help.
>> >>
>> >>  'gpg -d myfile.kmy' does indeed send the file to the display 
>> unencrypted
>> >> without requesting the p/w. 'cat myfile.kmy' shows the ascii armoured
>> >> file, so the encryption is there. Extracting possibly relevant 
>> files from
>> >> my list of installed files, this is what I found and includes a 
>> reference
>> >> to an agent
>> >>
>> >> gpgsm                        install
>> >> gpgv                        install
>> >> libgpg-error0                    install
>> >> libgpgme++2                    install
>> >> libgpgme11                    install
>> >> libqgpgme1                    install
>> >> gnupg                        install
>> >> gnupg-agent                    install
>> >> gnupg-curl                    install
>> >> gnupg2                        install
>> >> python-gnupginterface                install
>> >> seahorse                                        install
>> >> seahorse-plugins                                install
>> >>
>> >> Your further suggestions on where to look within the above or 
>> elsewhere
>> >> would be appreciated.
>> > With a running gpg-agent and the passphrase entered once, I can 
>> force the
>> > passphrase dialog with the following command:
>> >
>> >   GPG_AGENT_INFO= gpg -d myfile.kmy
>> >
>> > Does it ask for a passphrase now?
>> >
>> > This is more a GPG question and we're somewhat the wrong community 
>> here.
>> > Unless there is a GPG expert lurking here on the list :)
>> >
>> >
>> >
>> >> On 04/04/2011 21:26, Thomas Baumgart wrote:
>> >>> Hi,
>> >>>
>> >>> on Monday 04 April 2011 18:16:31 John Le Page wrote:
>> >>>> A great program which I started using about six months ago after 
>> Money
>> >>>> 2001 gave me very weird reports with incorrect totals!
>> >>>>
>> >>>> As I was familiar with PGP, I soon went to using the encryption 
>> option,
>> >>>> which has been working fine until today.
>> >>>>
>> >>>> On startup this morning I found it did not want to open my file 
>> and that
>> >>>> my Seahorse 2.32  was empty.  I had key backups which I restored 
>> into
>> >>>> Seahorse and then the encrypted file opened ok but without first
>> >>>> requesting my passphrase.   The problem is now that while the 
>> KMyMoney
>> >>>> file is being stored with the right ascii armoured format under
>> >>>>
>> >>>> -----BEGIN PGP MESSAGE-----
>> >>>> Version: GnuPG v1.4.10 (GNU/Linux)    etc
>> >>>>
>> >>>> but KMyMoney no longer asks me for the passphrase before opening 
>> the
>> >>>> file - it always just opens as soon as requested.
>> >>> KMyMoney uses GPG for the encryption. It does not store the 
>> passphrase at
>> >>> all, so I have no idea why that is. Do you have a gpg-agent running?
>> >>>
>> >>>> I have tried switching off the encryption, saving the file again,
>> >>>> closing & opening the file and re-saving it encrypted but still the
>> >>>> file next reopens without the passphrase being requested!
>> >>> What happens if you run 'gpg -d yourfile.kmy' ?  Does it decrypt 
>> to the
>> >>> console w/o entereing a passphrase?
>> >>>
>> >>>> Any suggestions?  My OS is Ubuntu 10.10  and KMyMoney 4.5.3.1 
>> from the
>> >>>> Clay Weber package.
>> >>> I don't expect KMyMoney being part of the problem. Are you sure 
>> you open
>> >>> the right file? Just to be sure.