202406 2007-12-15 18:00 0000 mail-client/squirrelmail doesn't work w/ gnupg-2.0.7 2008-02-15 18:26:17 0000 1 1 1 Unclassified Gentoo Linux Ebuilds unspecified All Linux RESOLVED UPSTREAM P2 normal --- 159851 1 emailgrant123@yahoo.com eradicator@gentoo.org crypto@gentoo.org empirical.humanist@gmail.com jakub@gentoo.org net-mail@gentoo.org emailgrant123@yahoo.com 2007-12-15 18:00:42 0000 Upgrading to gnupg-2.0.7 does not work with the squirrelmail GPG plugin. After I enter my password, squirrelmail hangs and I have to press stop and restart apache2 to get it back. Downgrading to gnupg-1.4.7-r1 fixes it. alonbl@gentoo.org 2007-12-16 20:00:06 0000 Which version of the software you are using? How does this product prompt for passphrase? Does it has its own dialog? emailgrant123@yahoo.com 2007-12-16 20:25:33 0000 I'm using squirrelmail-1.4.10a-r2. It prompts for a passphrase with a small pop-up window containing HTML. alonbl@gentoo.org 2007-12-16 20:49:46 0000 Thanks. I will see if I can come up with a patch until next week. alonbl@gentoo.org 2007-12-17 06:49:35 0000 Created an attachment (id=138697) gpg-1.2-gpg2.diff Oh... I hate php!!!! Maybe this will solve the issue, but... There was a comment in ChangeLog that it should mess something else: * Revision 1.17 2004/03/23 20:58:16 ke * -added cases for subkey revocation interactions * -removed --batch from non-pipe commands, to allow for more operations to function properly But if it works, we can ask upstream for a proper solution. Also, please modify gpg.php::GnuPG::debug to true, so that there would be a debug log to help us know how gpg is run, and attach the output. Please also add the following to ~/.gnupg/gpg.conf: debug-all logger-file /tmp/gpg.log And attach the result. Thanks! emailgrant123@yahoo.com 2007-12-18 14:28:04 0000 I applied the patch but the problem remains. With debugging I get the following in the browser: Adding homedir to parameter list. *SENSITIVE* Executing action decrypt with GnuPG Object. Using pipes to communicate with gpg. Saving previously set environmental variable LC_ALL=en_US.ISO8859-1 Setting environmental variable LC_ALL=en_US Setting environmental variable LC_LANG=en_US Setting environmental variable LC_LANGUAGE=en_US opengpg - executing "/usr/bin/gpg --batch --command-fd 7 --status-fd 5 --no-tty --yes --openpgp --homedir *SENSITIVE* --decrypt" Resetting environmental variable LC_ALL=en_US.ISO8859-1 proc_open commandline executed, pipes open Data available, sending to gpg: *SENSITIVE* entering writeData Pipe 0 open for writing, checking to see if it would block on write Sending Data!... (913) Data written 913 of 913 Closing Pipe 0 readStatus() Starting read status loop. Checking if read would block on pipes Streams read for reading: 1 Reading Status readStatus: [GNUPG:] ENC_TO *SENSITIVE* 16 0 Starting read status loop. Checking if read would block on pipes Streams read for reading: 1 Reading Status readStatus: [GNUPG:] USERID_HINT *SENSITIVE* Starting read status loop. Checking if read would block on pipes Streams read for reading: 1 Reading Status readStatus: [GNUPG:] NEED_PASSPHRASE *SENSITIVE* Looking for key fingerprint: *SENSITIVE* Couldn't match key! GPG requests passphrase for key *SENSITIVE* setting as active Key Starting read status loop. Checking if read would block on pipes Streams read for reading: 0 Starting read status loop. Checking if read would block on pipes Streams read for reading: 0 Starting read status loop. Checking if read would block on pipes Streams read for reading: 0 Starting read status loop. Checking if read would block on pipes Streams read for reading: 0 Starting read status loop. Checking if read would block on pipes These last three lines are repeated over and over as the browser hangs. /tmp/gpg.log is never created. alonbl@gentoo.org 2007-12-19 19:45:05 0000 Created an attachment (id=138904) gpg-1.2-gpg2.diff Oh... It gets some more complicated. I tried to separate the command-fd and passphrase-fd, but I don't know php so well... alonbl@gentoo.org 2007-12-19 19:59:06 0000 (From update of attachment 138904) Oops alonbl@gentoo.org 2007-12-19 19:59:30 0000 (From update of attachment 138697) Oops alonbl@gentoo.org 2007-12-19 20:03:04 0000 Tried to contact upstream, bugzilla is down and: ----- The following addresses had permanent fatal errors ----- "|/usr/lib/mailman/mail/mailman post gpg" (reason: 1) (expanded from: <gpg@braverock.com>) ----- Transcript of session follows ----- post script, list not found: gpg 554 5.3.0 unknown mailer error 1 Final-Recipient: RFC822; gpg@braverock.com X-Actual-Recipient: X-Unix; |/usr/lib/mailman/mail/mailman post gpg Action: failed Status: 5.0.0 Diagnostic-Code: X-Unix; 1 Last-Attempt-Date: Wed, 19 Dec 2007 13:58:02 -0600 emailgrant123@yahoo.com 2007-12-20 00:48:59 0000 I hate PHP too. Do you know of another webmail client with gpg support? alonbl@gentoo.org 2007-12-20 06:13:19 0000 I was very surprised that gpg integration is done one SERVER side... I expected this to be more like: http://firegpg.tuxfamily.org/ http://richard.jones.name/google-hacks/gmail-smime/gmail-smime.html Maybe one of these tools may be modified to support this webmail too... But crypto operations should be done on client side and not on server side, as keys cannot be transported to server, and unencrypted text cannot be transported either. emailgrant123@yahoo.com 2007-12-20 14:40:44 0000 OK, are we unable to make this work? alonbl@gentoo.org 2007-12-20 18:34:05 0000 Have you tried attachment#138904 alonbl@gentoo.org 2007-12-21 22:53:00 0000 eradicator: Do you know how to contact upstream? emailgrant123@yahoo.com 2007-12-21 22:58:18 0000 Alon, I'm going to try your patch ASAP. eradicator@gentoo.org 2007-12-27 23:20:13 0000 I sent an email to the squirrelmail-gpg guys months ago regarding another bug (a security bug IIRC) in their plugin and got no response... I'll try again. alonbl@gentoo.org 2008-01-06 20:06:13 0000 Upstream: > The GPG plugin should be able to work with gnupg-2 by changing the > use_proc_open=true > setting in the gpg_local_prefs.txt file to 'false' > If you could test this and get back to me I would appreciate it. Can anyone check this out? emailgrant123@yahoo.com 2008-01-06 20:59:00 0000 Testing now. emailgrant123@yahoo.com 2008-01-06 21:06:55 0000 Not fixed. Problem remains unfortunately. eradicator@gentoo.org 2008-01-07 02:46:39 0000 Alon, how were you able to get ahold of upstream? Can you CC me when you contact them? For some reason, I wasn't getting any response from them. Thanks. alonbl@gentoo.org 2008-01-10 17:06:12 0000 OK. Upstream did not reply to my latest message... :( Modified ebuilds to depend on gnupg-1.4* I hope upstream will resolve this issue... I don't think this product is worth the effort of us fixing it. moonwalker@astro.nu 2008-01-11 10:27:09 0000 Hi, that modifucation caused another problem after sync: merc ~ # emerge -uDalN world These are the packages that would be merged, in order: Calculating world dependencies - !!! Multiple versions within a single package slot have been !!! pulled into the dependency graph: app-crypt/gnupg:0 ('ebuild', '/', 'app-crypt/gnupg-1.4.8-r1', 'merge') pulled in by ('installed', '/', 'mail-client/squirrelmail-1.4.13', 'nomerge') ('installed', '/', 'app-crypt/gnupg-2.0.8', 'nomerge') pulled in by ('installed', '/', 'mail-filter/spamassassin-3.2.4', 'nomerge') It may be possible to solve this problem by using package.mask to prevent one of those packages from being selected. However, it is also possible that conflicting dependencies exist such that they are impossible to satisfy simultaneously. If such a conflict exists in the dependencies of two different packages, then those packages can not be installed simultaneously. For more information, see MASKED PACKAGES section in the emerge man page or refer to the Gentoo Handbook. !!! Depgraph creation failed. I think for it to work gnupg has to be slotted. Please fix again as this breaks currently working systems. alonbl@gentoo.org 2008-01-11 11:23:23 0000 This is due to old bug#1343. You should use package.mask to solve this until this bug is resolved. Having both versions of gnupg around causes too many other problems... If you know some php and would like to help, please checkout attachment#138904, help in fixing it up so it work with gnupg-2. If you send traces, I will glad to help making it work. jakub@gentoo.org 2008-01-11 16:42:26 0000 We should stop shipping this plugin and be done with it. If someone wants it, they are on their own. It *never* ever worked properly for me even w/ gpg-1.4. I contacted upstream about issues and never heard back from then. And as noted in Comment #11, the design is plain broken. eradicator@gentoo.org 2008-01-12 02:43:46 0000 Yeah, I agree with Jakub. I punted the gpg plugin from revbumps in ~arch. empirical.humanist@gmail.com 2008-02-15 15:15:32 0000 So...exactly what do we mask so that both squirrelmail and spamassassin work? gnupg-2.0.7? On my system, gnupg-2.0.7 is already installed: ('ebuild', '/', 'app-crypt/gnupg-1.4.7-r1', 'merge') pulled in by ('installed', '/', 'mail-client/squirrelmail-1.4.10a-r2', 'nomerge') ('installed', '/', 'app-crypt/gnupg-2.0.7', 'nomerge') pulled in by ('installed', '/', 'mail-filter/spamassassin-3.2.1-r1', 'nomerge') alonbl@gentoo.org 2008-02-15 18:26:17 0000 You add the following to your /etc/portage/package.mask >=app-crypt/gnupg-2.0.0 138697 2007-12-17 06:49 0000 gpg-2.1-gpg2.diff gpg-2.1-gpg2.diff text/plain ZGlmZiAtdXJOcCBncGcub3JnL2dwZy5waHAgZ3BnL2dwZy5waHAKLS0tIGdwZy5vcmcvZ3BnLnBo cAkyMDA3LTA3LTA3IDIzOjAzOjQyLjAwMDAwMDAwMCArMDMwMAorKysgZ3BnL2dwZy5waHAJMjAw Ny0xMi0xNyAwODo0MjoyMS4wMDAwMDAwMDAgKzAyMDAKQEAgLTMwNzIsNyArMzA3Miw3IEBAIGNs YXNzIEdudVBHCiAJCSRsYXN0U2Vjb25kQ29tbWFuZHM9Jyc7CiAKIAkJaWYoICR1c2VQYXNzcGhy YXNlICkKLQkJCSRsYXN0U2Vjb25kQ29tbWFuZHMgLj0gJyAtLWNvbW1hbmQtZmQgJy5QQVNTUEhS QVNFX0ZEOworCQkJJGxhc3RTZWNvbmRDb21tYW5kcyAuPSAnIC0tYmF0Y2ggLS1jb21tYW5kLWZk ICcuUEFTU1BIUkFTRV9GRDsKIAkJZWxzZQogCQkJJGxhc3RTZWNvbmRDb21tYW5kcyAuPSAnIC0t YmF0Y2gnOwogCg== 138904 2007-12-19 19:45 0000 gpg-2.1-gpg2.diff gpg-2.1-gpg2.diff text/plain ZGlmZiAtdXJOcCBncGcub3JnL2dwZy5waHAgZ3BnL2dwZy5waHAKLS0tIGdwZy5vcmcvZ3BnLnBo cAkyMDA3LTA3LTA3IDIzOjAzOjQyLjAwMDAwMDAwMCArMDMwMAorKysgZ3BnL2dwZy5waHAJMjAw Ny0xMi0xOSAyMTo0MTo1Ny4wMDAwMDAwMDAgKzAyMDAKQEAgLTI1LDYgKzI1LDcgQEAgZGVmaW5l KCAnR1BHU1RET1VUJywgMSApOwogZGVmaW5lKCAnR1BHU1RERVJSJywgMiApOwogZGVmaW5lKCAn U1RBVFVTX0ZEJywgNSApOwogZGVmaW5lKCAnUEFTU1BIUkFTRV9GRCcsIDcgKTsKK2RlZmluZSgg J1BBU1NQSFJBU0VfRkQyJywgOCApOwogZGVmaW5lKCAnQ0hFQ0tQQVNTV09SRF9GRCcsIDMgKTsK IAogLy8gZnJvbSBnbnVwZyBpbmNsdWRlL2NpcGhlci5oCkBAIC00NDQsNiArNDQ1LDcgQEAgY2xh c3MgR251UEcKIAkJR1BHU1RERVJSID0+IGFycmF5KCAncGlwZScsICd3JyApLCAgLy8gc3RkZXJy CiAJCVNUQVRVU19GRCA9PiBhcnJheSggJ3BpcGUnLCAndycgKSwKIAkJUEFTU1BIUkFTRV9GRCA9 PiBhcnJheSggJ3BpcGUnLCAncicgKQorCQlQQVNTUEhSQVNFX0ZEMiA9PiBhcnJheSggJ3BpcGUn LCAncicgKQogCSk7CiAKICAgICAvL1RoZXNlIHZhcmlhYmxlcyBjb250cm9sIHRoZSBlbnZpcm9u bWVudGFsIHZhcmlhYmxlcyB0aGF0IHdlIHRyeSB0byBzZXQgYmVmb3JlIGV4ZWN1dGluZyB0aGUg Z3BnIGJpbmFyeQpAQCAtMTUxMiw2ICsxNTE0LDcgQEAgY2xhc3MgR251UEcKIAkJCQkJCQkJZGVm YXVsdDoKIAkJCQkJCQkJCSR0aGlzLT5wcmludERlYnVnKCJUaGlzIGFjdGlvbjogIiAuICR0aGlz LT5hY3Rpb24gLiAiIGlzbid0IHdyaXR0ZW4gdG8gYWxsb3cgcGFzc2luZyBvZiB0aGUgcGFzc3Bo cmFzZS4iKTsKIAkJCQkJCQkJCSR0aGlzLT5jbG9zZVBpcGUoUEFTU1BIUkFTRV9GRCk7CisJCQkJ CQkJCQkkdGhpcy0+Y2xvc2VQaXBlKFBBU1NQSFJBU0VfRkQyKTsKIAkJCQkJCQkJCSR0aGlzLT5z ZXRFcnJvcigiTk9TVEFUVVMiLCJDb3VsZG4ndCBoYW5kbGUgdGhlIHN0YXR1cyIpOwogCQkJCQkJ CQkJYnJlYWs7CiAJCQkJCQkJfQpAQCAtMTc3MCw2ICsxNzczLDcgQEAgY2xhc3MgR251UEcKIAkJ CQljYXNlICJCRUdJTiBFTkNSWVBUSU9OIjoKIAkJCQkJJHRoaXMtPnByaW50RGVidWcoIkVuY3J5 cHRpb24gYmVndW4uIik7CiAJCQkJCSR0aGlzLT5jbG9zZVBpcGUoIFBBU1NQSFJBU0VfRkQgKTsK KwkJCQkJJHRoaXMtPmNsb3NlUGlwZSggUEFTU1BIUkFTRV9GRDIgKTsKIAkJCQkJYnJlYWs7CiAJ CQl9CiAJCX0gLy9lbmQgW0dOVVBHXTogaWYKQEAgLTE3OTUsNyArMTc5OSw3IEBAIGNsYXNzIEdu dVBHCiAJewogCQlpZiAoJHRoaXMtPnBhc3NwaHJhc2UpIHsKIAkJCSR0aGlzLT5wcmludERlYnVn KCAiU2VuZGluZyBQYXNzcGhyYXNlIiApOwotCQkJJHRoaXMtPndyaXRlRGF0YSggJHRoaXMtPnBh c3NwaHJhc2UuIlxuIiwgUEFTU1BIUkFTRV9GRCApOworCQkJJHRoaXMtPndyaXRlRGF0YSggJHRo aXMtPnBhc3NwaHJhc2UuIlxuIiwgUEFTU1BIUkFTRV9GRDIgKTsKIAkJCSR0aGlzLT5wcmludERl YnVnKCAiRG9uZSBTZW5kaW5nIFBhc3NwaHJhc2UiICk7CiAJCX0gZWxzZSB7CiAJCSRrZXlJbmRl eCA9ICR0aGlzLT5nZXRLZXlJbmRleEZyb21GaW5nZXJwcmludCggJGZpbmdlcnByaW50ICk7CkBA IC0xODAzLDEyICsxODA3LDEyIEBAIGNsYXNzIEdudVBHCiAJCWlmKCAka2V5SW5kZXggIT09IGZh bHNlICYmICR0aGlzLT5rZXlzWyAka2V5SW5kZXggXS0+cGFzc3BocmFzZSE9JycgKQogCQl7CiAJ CQkkdGhpcy0+cHJpbnREZWJ1ZyggIlNlbmRpbmcgUGFzc3BocmFzZSIgKTsKLQkJCSR0aGlzLT53 cml0ZURhdGEoICR0aGlzLT5rZXlzWyAka2V5SW5kZXhdLT5wYXNzcGhyYXNlLiJcbiIsIFBBU1NQ SFJBU0VfRkQgKTsKKwkJCSR0aGlzLT53cml0ZURhdGEoICR0aGlzLT5rZXlzWyAka2V5SW5kZXhd LT5wYXNzcGhyYXNlLiJcbiIsIFBBU1NQSFJBU0VfRkQyICk7CiAJCQkkdGhpcy0+cHJpbnREZWJ1 ZyggIkRvbmUgU2VuZGluZyBQYXNzcGhyYXNlIiApOwogCQl9CiAJCWVsc2UgewogCQkJJHRoaXMt PnByaW50RGVidWcoICJObyBQYXNzd29yZDogIiAuICR0aGlzLT5rZXlzWyAka2V5SW5kZXggXS0+ cGFzc3BocmFzZSAuICc/JyApOwotCQkJJHRoaXMtPndyaXRlRGF0YSgiXG4iLCBQQVNTUEhSQVNF X0ZEICk7CisJCQkkdGhpcy0+d3JpdGVEYXRhKCJcbiIsIFBBU1NQSFJBU0VfRkQyICk7CiAJCX0K IAkJfQogLy8JCSR0aGlzLT5jbG9zZVBpcGUoIFBBU1NQSFJBU0VfRkQgKTsKQEAgLTE4MjcsOCAr MTgzMSw4IEBAIGNsYXNzIEdudVBHCiAJewogCQlpZiAoJHRoaXMtPm5ld3Bhc3NwaHJhc2UpIHsK IAkJCSR0aGlzLT5wcmludERlYnVnKCJXcml0aW5nIG5ldyBwYXNzcGhyYXNlLiIgKTsKLQkJCSR0 aGlzLT53cml0ZURhdGEoJHRoaXMtPm5ld3Bhc3NwaHJhc2UuIlxuIixQQVNTUEhSQVNFX0ZEICk7 Ci0JCQkkdGhpcy0+d3JpdGVEYXRhKCR0aGlzLT5uZXdwYXNzcGhyYXNlLiJcbiIsUEFTU1BIUkFT RV9GRCApOworCQkJJHRoaXMtPndyaXRlRGF0YSgkdGhpcy0+bmV3cGFzc3BocmFzZS4iXG4iLFBB U1NQSFJBU0VfRkQyICk7CisJCQkkdGhpcy0+d3JpdGVEYXRhKCR0aGlzLT5uZXdwYXNzcGhyYXNl LiJcbiIsUEFTU1BIUkFTRV9GRDIgKTsKIAkJfSBlbHNlIHsKIAkJCSR0aGlzLT5wcmludERlYnVn KCJGYWlsZWQgdG8gZmluZCBuZXcgcGFzc3BocmFzZS4iICk7CiAJCX0KQEAgLTMwNzIsNyArMzA3 Niw3IEBAIGNsYXNzIEdudVBHCiAJCSRsYXN0U2Vjb25kQ29tbWFuZHM9Jyc7CiAKIAkJaWYoICR1 c2VQYXNzcGhyYXNlICkKLQkJCSRsYXN0U2Vjb25kQ29tbWFuZHMgLj0gJyAtLWNvbW1hbmQtZmQg Jy5QQVNTUEhSQVNFX0ZEOworCQkJJGxhc3RTZWNvbmRDb21tYW5kcyAuPSAnIC0tYmF0Y2ggLS1j b21tYW5kLWZkICcuUEFTU1BIUkFTRV9GRCAuICcgLS1wYXNzcGhyYXNlLWZkPScuUEFTU1BIUkFT RV9GRDI7CiAJCWVsc2UKIAkJCSRsYXN0U2Vjb25kQ29tbWFuZHMgLj0gJyAtLWJhdGNoJzsKIAo=