pressing cancel on the passphrase dialog doesn't work right

[Alex Mauer]

If you press "cancel" on the passphrase dialog, enigmail interprets it as an empty passphrase and will prompt again, ad infinitum. If instead you press OK without filling in the passphrase, enigmail will produce an error from gnupg, and allow you to cancel. This behaviour is the reverse of what one might expect.

[Alex Mauer (hawke)]

This is working better now (possibly with the release of 2:0.94.2-0ubuntu1 one day after this bug was reported). Cancel works as expcted. However, pressing OK still produces a failure when it should retry the passphrase entry.

[John Vivirito (gnomefreak)]

What version of ubuntu, thunderbird, enigmail are you using and what theme, extensions, addons are you using with thunderbird.

[Alex Mauer (hawke)]

Gutsy; 2.0.0.6; 0.95.0; theme: default; extensions: none (not sure how to check); addons: enigmail, lightning (lightning installed but not enabled).

Currently, cancel and OK both work the same; they'll prompt one additional time, and then fail.

[John Vivirito (gnomefreak)]

What is the exact error you are getting and did you set up your gpg key correctly in thunderbird. also can you please see if it happens with new profile.

[Alex Mauer (hawke)]

The exact error message is: "Sending of message failed. Please verify that your Mail & Newsgroups account settings are correct and try again." Yes, I set up my gpg key correctly in thunderbird (I can send and received encrypted mail without a problem.). Yes, it happens with a new profile.

Exact steps to duplicate: After setting up the account (It is not even necessary to fully configure it, just fill in anything for the hosts and email addresses, and assign an openPGP key to the account). Then compose a new email. Enable OpenPGP signing of the message. Hit send. Enigmail will prompt for the OpenPGP passphrase. Hit cancel. Enigmail will prompt for the passphrase again. (It should not.) Hit cancel again. Enigmail will produce the previously-mentioned error. (It should not) Hit send again. Enigmail will prompt. Hit "OK". Enigmail will prompt again. Hit "OK" again. Enigmail will produce the same error. (It should not).

[Mackenzie Morgan (maco.m)]

Can you still reproduce this on Hardy or Intrepid?

[Alex Mauer (hawke)]

Yes.

[Gord Allott (gordallott)]

Can't reproduce - clicking cancel gives a gpg error dialog and cancels
ubuntu hardy - thunderbird 2.0.0.14 (20080505) - enigmail 0.95.6

[Mackenzie Morgan (maco.m)]

Alex:
Do you agree with Gord that this is fixed in Hardy? Or Intrepid if you've upgraded to that?

[Larry Tate (cathect)]

I have Intrepid and I can confirm that there is a problem in enigmail where it is impossible for the passphrase to be cleared. Setting time for it to be cleared fails. Closing Thunderbird and reopening fails. The passphrase is retained in memory. Really, significantly insecure.

[rusivi2 (rusivi2-deactivatedaccount)]

Thank you for posting this bug.

Does this occur in Lucid?

[Rolf Leggewie (r0lf)]

does this ever occur in trusty or later?

[Rolf Leggewie (r0lf)]

We'd like to figure out what's causing this bug for you, but we haven't heard back from you in a while. Could you please provide the requested information? Thanks!

[Rolf Leggewie (r0lf)]

We are closing this bug report because it lacks the information we need to investigate the problem, as described in the previous comments. Please reopen it if you can give us the missing information, and don't hesitate to submit bug reports in the future. To reopen the bug report you can click on the current status, under the Status column, and change the Status back to "New". Thanks again!