FS#63666 - [libsecret] 0.19.0-1 breaks signing with gpg-agent and pinentry
Attached to Project:
Arch Linux
Opened by Matthew Sexton (wsdmatty) - Thursday, 05 September 2019, 14:34 GMT
Last edited by Jan Alexander Steffens (heftig) - Thursday, 05 September 2019, 18:47 GMT
Opened by Matthew Sexton (wsdmatty) - Thursday, 05 September 2019, 14:34 GMT
Last edited by Jan Alexander Steffens (heftig) - Thursday, 05 September 2019, 18:47 GMT
|
Details
Description:
Since updating libsecret to 0.19.0-1, any gpg usage that would call pinentry to receive my passphrase freezes. I noticed it initially with makepkg, but I have tested gpg -s (file) and gpg -e/d (file). To confirm that it was libsecret, I disabled testing repo and downgraded everything back to stable. I then added libsecret to ignorepkg in /etc/pacman.conf and re-enabled testing repos. pacman -Syu updated everything but libsecret and the problem was gone. I removed libsecret from ignorepkg and upgraded it to 0.19.0.1 and the problem returned. I am able to run pinentry/pinentry-qt and make it display windows and accept entry, so it seems like gpg-agent and pinentry aren't talking quite right. I have included a section of logs with annotation. See attached, or hosted here: https://bpaste.net/show/d0qC I searched on le google for any references to this issue and found nothing relevant. One said to kill gpg-agent, but was in response to using gpg over ssh and ttys not matching. Another was from 2008 and spontaneously resolved in a later version (gnupg 2.0.10rc1, pinentry (0.7.5) Versions: gnnupg 2.2.17-2 pinentry 1.1.0-4 libsecret 0.19.0-1 libassaun 2.5.3-1 libgcrypt 1.8.5-1 As far as I know, everything is "Most Recent In Repository", as I run pacman -Syu (package) for every install and pacman -Syu daily regardless. Steps to reproduce: Upgrade to latest Testing. Have GPG key Attempt to sign file, make package, decrypt file with gpg through gpg-agent and pinentry |
This task depends upon
Closed by Jan Alexander Steffens (heftig)
Thursday, 05 September 2019, 18:47 GMT
Reason for closing: Fixed
Additional comments about closing: libsecret 0.19.0-2
Thursday, 05 September 2019, 18:47 GMT
Reason for closing: Fixed
Additional comments about closing: libsecret 0.19.0-2
Alternatively, I also found that add "no-allow-external-cache" to ~/.gnupg/gpg-agent.conf makes gpg works without gnome-keyring. (Don't forget to restart gpg-agent~)