[Kmymoney-devel] Re: Decryption not requesting passphrase

[Jack Ostroff (CT D8 TC)]

I hate to ask, but are you absolutely certain you have a passphrase on  
the key?

On 2011.04.05 12:22, John Le Page wrote:
> No-it does not ask for the passphrase, even after a reboot. I only use
> gpg for KMyMoney encryption, not for email.
> If I delete my private key from my keyring, then I get a message from
> KMyMoney '......decryption failed' and the file no longer opens in  
> KMM.
> I will now try making a new private key, decrypting the file with the
> old one and re-encrypting with this new key and then see what happens.
> 
> Thanks for your help.  John
> 
> 
> On 05/04/2011 16:08, Jack wrote:
> > [this time to the list also...]
> >
> > I'm no gpg expert, but I suspect reinstalling gpg might not help, if
> > the default installation has the gpg-agent automatically run when  
> you
> > log in.
> >
> > Question - if you log out and then log in again, does it ask for the
> > passphrase the first time you open the file?  If so, then you may  
> just
> > want to stop gpg-agent from being run.  I'm not sure where to look -
> > but I'd start with .login and files like that, then look for any
> > system settings related to security.
> >
> > If it never asks for a passphrase (even first time after a reboot)
> > that's a stranger problem, since it means something is caching your
> > passphrase across reboots, and I don't think anything is supposed to
> > do that.  In fact, you never stated whether you ever enter your
> > passphrase for anything at all (not just KMM) after logging in.  If
> > you do, then getting gpg-agent not to run will fix your problem.  If
> > not, then something else is going on.
> >
> > Jack
> >
> > On 2011.04.05 05:17, John Le Page wrote:
> >>
> >> Unfortunately not.  I will re-install gpg etc and see if this  
> solves the
> >> problem. Thank you for trying!
> >>
> >>
> >> On 05/04/2011 10:44, Thomas Baumgart wrote:
> >> > Hi,
> >> >
> >> > on Tuesday 05 April 2011 10:09:54 John Le Page wrote:
> >> >
> >> >> Hello
> >> >>
> >> >> Your hunch was right. Thank you for your help.
> >> >>
> >> >>  'gpg -d myfile.kmy' does indeed send the file to the display
> >> unencrypted
> >> >> without requesting the p/w. 'cat myfile.kmy' shows the ascii  
> armoured
> >> >> file, so the encryption is there. Extracting possibly relevant
> >> files from
> >> >> my list of installed files, this is what I found and includes a
> >> reference
> >> >> to an agent
> >> >>
> >> >> gpgsm                        install
> >> >> gpgv                        install
> >> >> libgpg-error0                    install
> >> >> libgpgme++2                    install
> >> >> libgpgme11                    install
> >> >> libqgpgme1                    install
> >> >> gnupg                        install
> >> >> gnupg-agent                    install
> >> >> gnupg-curl                    install
> >> >> gnupg2                        install
> >> >> python-gnupginterface                install
> >> >> seahorse                                        install
> >> >> seahorse-plugins                                install
> >> >>
> >> >> Your further suggestions on where to look within the above or
> >> elsewhere
> >> >> would be appreciated.
> >> > With a running gpg-agent and the passphrase entered once, I can
> >> force the
> >> > passphrase dialog with the following command:
> >> >
> >> >   GPG_AGENT_INFO= gpg -d myfile.kmy
> >> >
> >> > Does it ask for a passphrase now?
> >> >
> >> > This is more a GPG question and we're somewhat the wrong  
> community
> >> here.
> >> > Unless there is a GPG expert lurking here on the list :)
> >> >
> >> >
> >> >
> >> >> On 04/04/2011 21:26, Thomas Baumgart wrote:
> >> >>> Hi,
> >> >>>
> >> >>> on Monday 04 April 2011 18:16:31 John Le Page wrote:
> >> >>>> A great program which I started using about six months ago  
> after
> >> Money
> >> >>>> 2001 gave me very weird reports with incorrect totals!
> >> >>>>
> >> >>>> As I was familiar with PGP, I soon went to using the  
> encryption
> >> option,
> >> >>>> which has been working fine until today.
> >> >>>>
> >> >>>> On startup this morning I found it did not want to open my  
> file
> >> and that
> >> >>>> my Seahorse 2.32  was empty.  I had key backups which I  
> restored
> >> into
> >> >>>> Seahorse and then the encrypted file opened ok but without  
> first
> >> >>>> requesting my passphrase.   The problem is now that while the
> >> KMyMoney
> >> >>>> file is being stored with the right ascii armoured format  
> under
> >> >>>>
> >> >>>> -----BEGIN PGP MESSAGE-----
> >> >>>> Version: GnuPG v1.4.10 (GNU/Linux)    etc
> >> >>>>
> >> >>>> but KMyMoney no longer asks me for the passphrase before  
> opening
> >> the
> >> >>>> file - it always just opens as soon as requested.
> >> >>> KMyMoney uses GPG for the encryption. It does not store the
> >> passphrase at
> >> >>> all, so I have no idea why that is. Do you have a gpg-agent  
> running?
> >> >>>
> >> >>>> I have tried switching off the encryption, saving the file  
> again,
> >> >>>> closing & opening the file and re-saving it encrypted but  
> still the
> >> >>>> file next reopens without the passphrase being requested!
> >> >>> What happens if you run 'gpg -d yourfile.kmy' ?  Does it  
> decrypt
> >> to the
> >> >>> console w/o entereing a passphrase?
> >> >>>
> >> >>>> Any suggestions?  My OS is Ubuntu 10.10  and KMyMoney 4.5.3.1
> >> from the
> >> >>>> Clay Weber package.
> >> >>> I don't expect KMyMoney being part of the problem. Are you sure
> >> you open
> >> >>> the right file? Just to be sure.
> 
> 
> _______________________________________________
> KMyMoney-devel mailing list
> KMyMoney-devel at kde.org
> https://mail.kde.org/mailman/listinfo/kmymoney-devel
>