[Kmymoney-devel] Re: Decryption not requesting passphrase

John Le Page falla07 at cybersmart.co.za
Wed Apr 6 11:36:58 CEST 2011


Thank you Jack and Thomas for your help. Everything now working again.

Final solution: Put the passphrase back into the key! and, because I had 
reloaded gnupg, uncomment the 'use-agent' option in gpg.conf. Simple 
when you know how.  :)  Regards, John


On 05/04/2011 19:08, Jack Ostroff (CT D8 TC) wrote:
> I hate to ask, but are you absolutely certain you have a passphrase on 
> the key?
>
> On 2011.04.05 12:22, John Le Page wrote:
>> No-it does not ask for the passphrase, even after a reboot. I only use
>> gpg for KMyMoney encryption, not for email.
>> If I delete my private key from my keyring, then I get a message from
>> KMyMoney '......decryption failed' and the file no longer opens in KMM.
>> I will now try making a new private key, decrypting the file with the
>> old one and re-encrypting with this new key and then see what happens.
>>
>> Thanks for your help.  John
>>
>>
>> On 05/04/2011 16:08, Jack wrote:
>> > [this time to the list also...]
>> >
>> > I'm no gpg expert, but I suspect reinstalling gpg might not help, if
>> > the default installation has the gpg-agent automatically run when you
>> > log in.
>> >
>> > Question - if you log out and then log in again, does it ask for the
>> > passphrase the first time you open the file?  If so, then you may just
>> > want to stop gpg-agent from being run.  I'm not sure where to look -
>> > but I'd start with .login and files like that, then look for any
>> > system settings related to security.
>> >
>> > If it never asks for a passphrase (even first time after a reboot)
>> > that's a stranger problem, since it means something is caching your
>> > passphrase across reboots, and I don't think anything is supposed to
>> > do that.  In fact, you never stated whether you ever enter your
>> > passphrase for anything at all (not just KMM) after logging in.  If
>> > you do, then getting gpg-agent not to run will fix your problem.  If
>> > not, then something else is going on.
>> >
>> > Jack
>> >
>> > On 2011.04.05 05:17, John Le Page wrote:
>> >>
>> >> Unfortunately not.  I will re-install gpg etc and see if this 
>> solves the
>> >> problem. Thank you for trying!
>> >>
>> >>
>> >> On 05/04/2011 10:44, Thomas Baumgart wrote:
>> >> > Hi,
>> >> >
>> >> > on Tuesday 05 April 2011 10:09:54 John Le Page wrote:
>> >> >
>> >> >> Hello
>> >> >>
>> >> >> Your hunch was right. Thank you for your help.
>> >> >>
>> >> >>  'gpg -d myfile.kmy' does indeed send the file to the display
>> >> unencrypted
>> >> >> without requesting the p/w. 'cat myfile.kmy' shows the ascii 
>> armoured
>> >> >> file, so the encryption is there. Extracting possibly relevant
>> >> files from
>> >> >> my list of installed files, this is what I found and includes a
>> >> reference
>> >> >> to an agent
>> >> >>
>> >> >> gpgsm                        install
>> >> >> gpgv                        install
>> >> >> libgpg-error0                    install
>> >> >> libgpgme++2                    install
>> >> >> libgpgme11                    install
>> >> >> libqgpgme1                    install
>> >> >> gnupg                        install
>> >> >> gnupg-agent                    install
>> >> >> gnupg-curl                    install
>> >> >> gnupg2                        install
>> >> >> python-gnupginterface                install
>> >> >> seahorse                                        install
>> >> >> seahorse-plugins                                install
>> >> >>
>> >> >> Your further suggestions on where to look within the above or
>> >> elsewhere
>> >> >> would be appreciated.
>> >> > With a running gpg-agent and the passphrase entered once, I can
>> >> force the
>> >> > passphrase dialog with the following command:
>> >> >
>> >> >   GPG_AGENT_INFO= gpg -d myfile.kmy
>> >> >
>> >> > Does it ask for a passphrase now?
>> >> >
>> >> > This is more a GPG question and we're somewhat the wrong community
>> >> here.
>> >> > Unless there is a GPG expert lurking here on the list :)
>> >> >
>> >> >
>> >> >
>> >> >> On 04/04/2011 21:26, Thomas Baumgart wrote:
>> >> >>> Hi,
>> >> >>>
>> >> >>> on Monday 04 April 2011 18:16:31 John Le Page wrote:
>> >> >>>> A great program which I started using about six months ago after
>> >> Money
>> >> >>>> 2001 gave me very weird reports with incorrect totals!
>> >> >>>>
>> >> >>>> As I was familiar with PGP, I soon went to using the encryption
>> >> option,
>> >> >>>> which has been working fine until today.
>> >> >>>>
>> >> >>>> On startup this morning I found it did not want to open my file
>> >> and that
>> >> >>>> my Seahorse 2.32  was empty.  I had key backups which I restored
>> >> into
>> >> >>>> Seahorse and then the encrypted file opened ok but without first
>> >> >>>> requesting my passphrase.   The problem is now that while the
>> >> KMyMoney
>> >> >>>> file is being stored with the right ascii armoured format under
>> >> >>>>
>> >> >>>> -----BEGIN PGP MESSAGE-----
>> >> >>>> Version: GnuPG v1.4.10 (GNU/Linux)    etc
>> >> >>>>
>> >> >>>> but KMyMoney no longer asks me for the passphrase before opening
>> >> the
>> >> >>>> file - it always just opens as soon as requested.
>> >> >>> KMyMoney uses GPG for the encryption. It does not store the
>> >> passphrase at
>> >> >>> all, so I have no idea why that is. Do you have a gpg-agent 
>> running?
>> >> >>>
>> >> >>>> I have tried switching off the encryption, saving the file 
>> again,
>> >> >>>> closing & opening the file and re-saving it encrypted but 
>> still the
>> >> >>>> file next reopens without the passphrase being requested!
>> >> >>> What happens if you run 'gpg -d yourfile.kmy' ?  Does it decrypt
>> >> to the
>> >> >>> console w/o entereing a passphrase?
>> >> >>>
>> >> >>>> Any suggestions?  My OS is Ubuntu 10.10  and KMyMoney 4.5.3.1
>> >> from the
>> >> >>>> Clay Weber package.
>> >> >>> I don't expect KMyMoney being part of the problem. Are you sure
>> >> you open
>> >> >>> the right file? Just to be sure.
>>
>>
>> _______________________________________________
>> KMyMoney-devel mailing list
>> KMyMoney-devel at kde.org
>> https://mail.kde.org/mailman/listinfo/kmymoney-devel
>>
>
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.kde.org/pipermail/kmymoney-devel/attachments/20110406/885b8924/attachment-0001.htm 


More information about the KMyMoney-devel mailing list