[Kmymoney-devel] Re: Decryption not requesting passphrase

[Thomas Baumgart]

Hi,

on Tuesday 05 April 2011 16:08:54 Jack wrote:

> [this time to the list also...]
> 
> I'm no gpg expert, but I suspect reinstalling gpg might not help, if
> the default installation has the gpg-agent automatically run when you
> log in.
> 
> Question - if you log out and then log in again, does it ask for the
> passphrase the first time you open the file?  If so, then you may just
> want to stop gpg-agent from being run.  I'm not sure where to look -
> but I'd start with .login and files like that, then look for any system
> settings related to security.
> 
> If it never asks for a passphrase (even first time after a reboot)
> that's a stranger problem, since it means something is caching your
> passphrase across reboots, and I don't think anything is supposed to do
> that.  In fact, you never stated whether you ever enter your passphrase
> for anything at all (not just KMM) after logging in.  If you do, then
> getting gpg-agent not to run will fix your problem.

Running KMyMoney w/o the gpg-agent is not a good idea. It does not work at 
all.

> If not, then something else is going on.

I second that. Do you have a passphrase on the key at all?


> On 2011.04.05 05:17, John Le Page wrote:
> > Unfortunately not.  I will re-install gpg etc and see if this solves
> > the
> > problem. Thank you for trying!
> > 
> > On 05/04/2011 10:44, Thomas Baumgart wrote:
> > > Hi,
> > > 
> > > on Tuesday 05 April 2011 10:09:54 John Le Page wrote:
> > >> Hello
> > >> 
> > >> Your hunch was right. Thank you for your help.
> > >> 
> > >>  'gpg -d myfile.kmy' does indeed send the file to the display
> > 
> > unencrypted
> > 
> > >> without requesting the p/w. 'cat myfile.kmy' shows the ascii
> > 
> > armoured
> > 
> > >> file, so the encryption is there. Extracting possibly relevant
> > 
> > files from
> > 
> > >> my list of installed files, this is what I found and includes a
> > 
> > reference
> > 
> > >> to an agent
> > >> 
> > >> gpgsm						install
> > >> gpgv						install
> > >> libgpg-error0					install
> > >> libgpgme++2					install
> > >> libgpgme11					install
> > >> libqgpgme1					install
> > >> gnupg						install
> > >> gnupg-agent					install
> > >> gnupg-curl					install
> > >> gnupg2						install
> > >> python-gnupginterface				install
> > >> seahorse                                        install
> > >> seahorse-plugins                                install
> > >> 
> > >> Your further suggestions on where to look within the above or
> > 
> > elsewhere
> > 
> > >> would be appreciated.
> > > 
> > > With a running gpg-agent and the passphrase entered once, I can
> > 
> > force the
> > 
> > > passphrase dialog with the following command:
> > >   GPG_AGENT_INFO= gpg -d myfile.kmy
> > > 
> > > Does it ask for a passphrase now?
> > > 
> > > This is more a GPG question and we're somewhat the wrong community
> > 
> > here.
> > 
> > > Unless there is a GPG expert lurking here on the list :)
> > > 
> > >> On 04/04/2011 21:26, Thomas Baumgart wrote:
> > >>> Hi,
> > >>> 
> > >>> on Monday 04 April 2011 18:16:31 John Le Page wrote:
> > >>>> A great program which I started using about six months ago after
> > 
> > Money
> > 
> > >>>> 2001 gave me very weird reports with incorrect totals!
> > >>>> 
> > >>>> As I was familiar with PGP, I soon went to using the encryption
> > 
> > option,
> > 
> > >>>> which has been working fine until today.
> > >>>> 
> > >>>> On startup this morning I found it did not want to open my file
> > 
> > and that
> > 
> > >>>> my Seahorse 2.32  was empty.  I had key backups which I restored
> > 
> > into
> > 
> > >>>> Seahorse and then the encrypted file opened ok but without first
> > >>>> requesting my passphrase.   The problem is now that while the
> > 
> > KMyMoney
> > 
> > >>>> file is being stored with the right ascii armoured format under
> > >>>> 
> > >>>> -----BEGIN PGP MESSAGE-----
> > >>>> Version: GnuPG v1.4.10 (GNU/Linux)    etc
> > >>>> 
> > >>>> but KMyMoney no longer asks me for the passphrase before opening
> > 
> > the
> > 
> > >>>> file - it always just opens as soon as requested.
> > >>> 
> > >>> KMyMoney uses GPG for the encryption. It does not store the
> > 
> > passphrase at
> > 
> > >>> all, so I have no idea why that is. Do you have a gpg-agent
> > 
> > running?
> > 
> > >>>> I have tried switching off the encryption, saving the file again,
> > >>>> closing & opening the file and re-saving it encrypted but still
> > 
> > the
> > 
> > >>>> file next reopens without the passphrase being requested!
> > >>> 
> > >>> What happens if you run 'gpg -d yourfile.kmy' ?  Does it decrypt
> > 
> > to the
> > 
> > >>> console w/o entereing a passphrase?
> > >>> 
> > >>>> Any suggestions?  My OS is Ubuntu 10.10  and KMyMoney 4.5.3.1
> > 
> > from the
> > 
> > >>>> Clay Weber package.
> > >>> 
> > >>> I don't expect KMyMoney being part of the problem. Are you sure
> > 
> > you open
> > 
> > >>> the right file? Just to be sure.
> 
> _______________________________________________
> KMyMoney-devel mailing list
> KMyMoney-devel at kde.org
> https://mail.kde.org/mailman/listinfo/kmymoney-devel

-- 

Regards

Thomas Baumgart

GPG-FP: E55E D592 F45F 116B 8429   4F99 9C59 DB40 B75D D3BA
-------------------------------------------------------------
Vista is the abrreviation of
'Viruses, Instability, Spyware, Trojans, Adware'...
-------------------------------------------------------------
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 225 bytes
Desc: This is a digitally signed message part.
Url : http://mail.kde.org/pipermail/kmymoney-devel/attachments/20110405/59f58632/attachment-0001.sig