<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/xhtml; charset=utf-8">
</head>
<body>
<div><div class="plaintext"><p dir="auto">Hi,
</p>
<p dir="auto">that didn’t really help. With that setting I get:
</p>
<p dir="auto">gpg: invalid pinentry mode '/usr/local/MacGPG2/libexec/pinentry-mac.app/Contents/MacOS/pinentry-mac'
</p>
<p dir="auto">But it led me in the right direction. I commented out the pinentry-mode lines, and now it seems to be working! I get a warning that SHA-1 is used and this recommendation:
</p>
<p dir="auto">The hash function used for the message digest has been obsoleted due to security concerns. You should change your OpenPGP settings to use a stronger hash algorithm for the digest (such as SHA256).
</p>
<p dir="auto">Do you know off-hand how I can do that?
</p>
<p dir="auto">Thanks,
<br />
Sebastian
</p>
<p dir="auto">On 5 Jan 2021, at 17:26, Thomas Kahle wrote:
</p>
<p dir="auto"></p></div><blockquote class="embedded"><div id="FD872D35-963A-4D71-9CEC-D17D57C1379C">
<div style="font-family:sans-serif"><div style="white-space:normal"><p dir="auto">Hi,
</p>
<p dir="auto">Why not set
</p>
<p dir="auto">pinentry-program /usr/local/MacGPG2/libexec/pinentry-mac.app/Contents/MacOS/pinentry-mac
</p>
<p dir="auto">in gpg-agent.conf?
</p>
<p dir="auto">In both of your files there are things with ‘pinentry loopback’. I don’t know what it is, but maybe the first step would be to have a pinentry program actually pop-up? I don’t know what loopback refers to, but I would start to investigate there.
</p>
<p dir="auto">Good luck,
<br>
Thomas
</p>
<p dir="auto">On 5 Jan 2021, at 14:56, Sebastian Hagedorn wrote:
</p>
<p dir="auto"></p></div><blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px"><div id="686885D0-B82A-40B0-BC9D-2179C47068A1">
<div><div class="plaintext"><p dir="auto">Thanks. I went one a side quest for a while, because your public key couldn’t be loaded. Somehow the Let’s Encrypted certificate for <a href="hkps://keys.openpgp.org">hkps://keys.openpgp.org</a> wasn’t trusted. I switched to eu.pool.sks-keyservers.net, and now that part is working, at least.
</p>
<p dir="auto">To answer your question: yes, gpg-agent is running:
</p>
<p dir="auto"> 505 1633 1 0 11:15am ?? 0:00.30 gpg-agent --homedir /Users/hgd/.gnupg --use-standard-socket --daemon
</p>
<p dir="auto">The version that’s running is from MacGPG. I also have a separate installation from Homebrew, but that’s not being used. Perhaps we could compare configuration files?
</p>
<p dir="auto">gpg-agent.conf:
</p>
<p dir="auto">default-cache-ttl 300
<br />
max-cache-ttl 999999
<br />
#pinentry-program
<br />
allow-loopback-pinentry
</p>
<p dir="auto">gpg.conf:
</p>
<p dir="auto">armor
<br />
#openpgp
<br />
default-key Hagedorn@spinfo.uni-koeln.de
<br />
encrypt-to 09C25485
<br />
force-mdc
<br />
#compress-algo 1
<br />
#no-secmem-warning
<br />
trust-model direct
<br />
#keyserver <a href="hkp://wwwkeys.de.pgp.net">hkp://wwwkeys.de.pgp.net</a>
<br />
keyserver-options include-subkeys no-include-revoked timeout=5
<br />
charset utf8
<br />
utf8-strings
<br />
group uklan@uni-koeln.de=4D105B45 C46E14A6
</p>
<p dir="auto">group BUDDY=
<br />
emit-version
<br />
auto-key-locate keyserver
<br />
auto-key-retrieve
<br />
use-agent
<br />
pinentry-mode loopback
</p>
<p dir="auto">To be honest, some of these options are 20 years old, and I don’t even remember what there were for :D
</p>
<p dir="auto">Cheers,
<br />
Sebastian
</p>
<p dir="auto">On 5 Jan 2021, at 13:05, Thomas Kahle wrote:
</p>
<p dir="auto"></p></div><blockquote class="embedded"><div id="347E1C2F-C790-428A-AF88-D7172C9BBE0A">
<div style="font-family:sans-serif"><div style="white-space:normal">
<p dir="auto">On 5 Jan 2021, at 12:23, Sebastian Hagedorn wrote:</p>
</div><div style="white-space:normal"><blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px"><p dir="auto">Possible, but IMO that’s not really a solution. Every other mail application I have used had a method for requesting and/or storing the passphrase. It’s also stored in my keychain. Can somebody confirm if that is expected behaviour with a protected key?
</p>
</blockquote></div>
<div style="white-space:normal">
<p dir="auto">I use encrypted pgp keys whose passphrases are stored in keychain and it works completely transparently.</p>
<p dir="auto">When I switched from Thunderbird to Mailmate it just worked out of the box. Have you configured gig-agent? Is it running?</p>
<p dir="auto">What’s the output of <code style="background-color:#F7F7F7; border-radius:3px; margin:0; padding:0 0.4em" bgcolor="#F7F7F7">ps -ef | grep gpg-agent</code> ?</p>
<p dir="auto">Cheers,<br>
Thomas</p>
</div><div style="white-space:normal"><blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px"><p dir="auto">On 5 Jan 2021, at 12:11, Alexandre Takacs wrote:
</p>
<blockquote style="border-left:2px solid #777; color:#999; margin:0 0 5px; padding-left:5px; border-left-color:#999"><p dir="auto">It would seems that your key I password protected and PGP is working in a batch mode not allowing it to request said pass.
<br>
Can you try with a non protected key (as a test to validate the above) ?
<br>
On 5 Jan 2021, at 10:56, Sebastian Hagedorn wrote:
</p>
<blockquote style="border-left:2px solid #777; color:#BBB; margin:0 0 5px; padding-left:5px; border-left-color:#BBB"><p dir="auto">gpg: Sorry, we are in batchmode - can't get input
<br>
I have a suspicion that is caused by something in my gpg settings, but I don’t see anything obvious.
<br>
Ideas?
</p>
</blockquote><p dir="auto">_______________________________________________
<br>
mailmate mailing list
<br>
mailmate@lists.freron.com
<br>
<a href="https://lists.freron.com/listinfo/mailmate" style="color:#999">https://lists.freron.com/listinfo/mailmate</a>
</p>
</blockquote><p dir="auto">_______________________________________________
<br>
mailmate mailing list
<br>
mailmate@lists.freron.com
<br>
<a href="https://lists.freron.com/listinfo/mailmate" style="color:#777">https://lists.freron.com/listinfo/mailmate</a>
</p>
</blockquote></div>
<div style="white-space:normal">
<p dir="auto">--<br>
Thomas Kahle<br>
<a href="https://www.thomas-kahle.de" style="color:#3983C4">https://www.thomas-kahle.de</a></p>
</div></div></div></blockquote>
<div class="plaintext"><p dir="auto">
</p>
<blockquote><p dir="auto">_______________________________________________
<br />
mailmate mailing list
<br />
mailmate@lists.freron.com
<br />
<a href="https://lists.freron.com/listinfo/mailmate">https://lists.freron.com/listinfo/mailmate</a>
</p>
</blockquote></div>
</div></div></blockquote>
<div style="white-space:normal"><p dir="auto">
</p>
<blockquote style="border-left:2px solid #777; color:#777; margin:0 0 5px; padding-left:5px"><p dir="auto">_______________________________________________
<br>
mailmate mailing list
<br>
mailmate@lists.freron.com
<br>
<a href="https://lists.freron.com/listinfo/mailmate" style="color:#777">https://lists.freron.com/listinfo/mailmate</a>
</p>
</blockquote><p dir="auto">--
<br>
Thomas Kahle
<br>
<a href="https://www.thomas-kahle.de" style="color:#3983C4">https://www.thomas-kahle.de</a>
</p>
</div>
</div></div></blockquote>
<div class="plaintext"><p dir="auto">
</p>
<blockquote><p dir="auto">_______________________________________________
<br />
mailmate mailing list
<br />
mailmate@lists.freron.com
<br />
<a href="https://lists.freron.com/listinfo/mailmate">https://lists.freron.com/listinfo/mailmate</a>
</p>
</blockquote></div>
</div>
</body>
</html>