[gentoo-user] gnupg 2.1: mutt asks for the passphrase twice

[gentoo-user] gnupg 2.1: mutt asks for the passphrase twice

[Frank Steinmetzger]

[-- Attachment #1: Type: text/plain, Size: 648 bytes --]

Hey fellows,

apparently, gnupg 2.1 does not recognise my passphrase anymore if I enter it
in mutt’s terminal: I compose a signed mail in mutt and send it off. Thus I
am asked for the passphrase first on the terminal (as it has always been),
and then a second time in a graphical pinentry window.

The latter did not happen with gnupg 2.0 (double-checked by downgrading).
Does anyone have a hint what’s wrong here and how I can fix this?

Cheers and a happy pre-weekend.
-- 
Gruß | Greetings | Qapla’
Please do not share anything from, with or about me with any social network.

The »S« in »IoT« stands for »security«.

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 819 bytes --]

Re: [gentoo-user] gnupg 2.1: mutt asks for the passphrase twice

[Sam Jorna]

[-- Attachment #1: Type: text/plain, Size: 1065 bytes --]

On Thu, Nov 17, 2016 at 10:08:08PM +0100, Frank Steinmetzger wrote:
> Hey fellows,
> 
> apparently, gnupg 2.1 does not recognise my passphrase anymore if I enter it
> in mutt’s terminal: I compose a signed mail in mutt and send it off. Thus I
> am asked for the passphrase first on the terminal (as it has always been),
> and then a second time in a graphical pinentry window.
> 
> The latter did not happen with gnupg 2.0 (double-checked by downgrading).
> Does anyone have a hint what’s wrong here and how I can fix this?

I just recently resolved this myself. You need to add

--pinentry-mode loopback

to the relevant commands in your muttrc:

set pgp_decode_command="gpg --pinentry-mode loopback %?p?--passphrase-fd 0? --no-verbose --batch --output - %f"
set pgp_verify_command="gpg --pinentry-mode loopback --no-verbose --batch --output - --verify %s %f"
set pgp_decrypt_command="gpg --pinentry-mode loopback --passphrase-fd 0 --no-verbose --batch --output - %f"

-- 
Sam Jorna (wraeth)
GnuPG Key: D6180C26

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 977 bytes --]

Re: [gentoo-user] gnupg 2.1: mutt asks for the passphrase twice

[Sam Jorna]

[-- Attachment #1: Type: text/plain, Size: 1460 bytes --]

On Fri, Nov 18, 2016 at 08:20:17AM +1100, Sam Jorna wrote:
> On Thu, Nov 17, 2016 at 10:08:08PM +0100, Frank Steinmetzger wrote:
> > Hey fellows,
> > 
> > apparently, gnupg 2.1 does not recognise my passphrase anymore if I enter it
> > in mutt’s terminal: I compose a signed mail in mutt and send it off. Thus I
> > am asked for the passphrase first on the terminal (as it has always been),
> > and then a second time in a graphical pinentry window.
> > 
> > The latter did not happen with gnupg 2.0 (double-checked by downgrading).
> > Does anyone have a hint what’s wrong here and how I can fix this?
> 
> I just recently resolved this myself. You need to add
> 
> --pinentry-mode loopback
> 
> to the relevant commands in your muttrc:
> 
> set pgp_decode_command="gpg --pinentry-mode loopback %?p?--passphrase-fd 0? --no-verbose --batch --output - %f"
> set pgp_verify_command="gpg --pinentry-mode loopback --no-verbose --batch --output - --verify %s %f"
> set pgp_decrypt_command="gpg --pinentry-mode loopback --passphrase-fd 0 --no-verbose --batch --output - %f"

Just re-read this and realised it sounds like I meant the only ones you 
needed it on were those three. I believe the option needs to be added to 
those three plus "pgp_sign_command" and "pgp_clearsign_command".  Others 
I believe won't ask for a passphrase and so shouldn't need the option.

-- 
Sam Jorna
GnuPG Key: D6180C26

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 977 bytes --]

Re: [gentoo-user] gnupg 2.1: mutt asks for the passphrase twice

[Frank Steinmetzger]

[-- Attachment #1: Type: text/plain, Size: 1213 bytes --]

On Fri, Nov 18, 2016 at 08:26:48AM +1100, Sam Jorna wrote:

> > > apparently, gnupg 2.1 does not recognise my passphrase anymore if I enter it
> > > in mutt’s terminal: I compose a signed mail in mutt and send it off. Thus I
> > > am asked for the passphrase first on the terminal (as it has always been),
> > > and then a second time in a graphical pinentry window.
> >
> > I just recently resolved this myself. You need to add
> > 
> > --pinentry-mode loopback
> > 
> > to the relevant commands in your muttrc:
> > [...]
> Just re-read this and realised it sounds like I meant the only ones you
> needed it on were those three. I believe the option needs to be added to
> those three plus "pgp_sign_command" and "pgp_clearsign_command".

Thanks a mucho. The mutt docs say that pgp_clearsign_command is deprecated,
so I won’t change that. In case I ever use it unintentionally. :)

I used the opportunity to upgrade mutt from 1.5 to 1.7, which merged the
sidebar patch upstream with better formatting than before. *yay*

-- 
Gruß | Greetings | Qapla’
Please do not share anything from, with or about me with any social network.

Anything unrelated to elephants is irrelephant.

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 801 bytes --]