Avatar for Username

Zoeken in Support

Vermijd ondersteuningsscams. We zullen u nooit vragen een telefoonnummer te bellen, er een sms naar te sturen of persoonlijke gegevens te delen. Meld verdachte activiteit met de optie ‘Misbruik melden’.

Meer info

Deze conversatie is gearchiveerd. Stel een nieuwe vraag als u hulp nodig hebt.

How to use Thunderbird 78 + Gpg4win + Yubikey

  • 4 antwoorden
  • 2 hebben dit probleem
  • 1 weergave
  • Laatste antwoord van steven.demarco

DDoSolitary
DDoSolitary
more options

I had been using Thunderbird + Enigmail + Gpg4win + Yubikey to sign and encrypt my emails and the setup worked pretty well. However, after updating to Thunderbird 78, which has built-in OpenPGP support, I'm having trouble to configure it to work with my Yubikey.

Following is my GPG keyring:

PS C:\Users\DDoSolitary> gpg -K --keyid-format long C:/Users/DDoSolitary/AppData/Roaming/gnupg/pubring.kbx

sec# ed25519/50268311C7AD3F62 2017-09-02 [SC] 

     688E1D093C3638F588890D4450268311C7AD3F62

uid [ultimate] DDoSolitary <[email protected]> uid [ultimate] DDoSolitary <[email protected]> ssb> rsa4096/A7A1C4F99C807AD4 2019-03-21 [A] ssb> rsa4096/F091309F5863457C 2019-03-21 [E] ssb> rsa4096/90A79E1B71BC0CB1 2019-03-21 [S]

The master key is kept offline and the subkeys are stored in my Yubikey and are used to sign/encrypt messages.

What I've tried:

1. Enable "mail.openpgp.allow_external_gnupg" according to https://wiki.mozilla.org/Thunderbird:OpenPGP:Smartcards 2. Add my key ID to in the "End to End Encryption" section of Account Settings (I've tried key ID of the master key and the signing subkey, both of which don't work) 3. Write a new message, check "Security > Digitally Sign This Message", then click Send.

I've checked that the GPGME library (C:\Program Files (x86)\GnuPG\bin\libgpgme-11.dll) is in the PATH environment variable. As Gpg4win only provides 32-bit builds, I also reinstalled the 32-bit version of Thunderbird.

Unfortunately, I always get "Unable to send the message, because there is a problem with your personal key. The configured key ID 'xxx' cannot be found on your keyring."

I had been using Thunderbird + Enigmail + Gpg4win + Yubikey to sign and encrypt my emails and the setup worked pretty well. However, after updating to Thunderbird 78, which has built-in OpenPGP support, I'm having trouble to configure it to work with my Yubikey. Following is my GPG keyring: PS C:\Users\DDoSolitary> gpg -K --keyid-format long C:/Users/DDoSolitary/AppData/Roaming/gnupg/pubring.kbx ------------------------------------------------------ sec# ed25519/50268311C7AD3F62 2017-09-02 [SC] 688E1D093C3638F588890D4450268311C7AD3F62 uid [ultimate] DDoSolitary <[email protected]> uid [ultimate] DDoSolitary <[email protected]> ssb> rsa4096/A7A1C4F99C807AD4 2019-03-21 [A] ssb> rsa4096/F091309F5863457C 2019-03-21 [E] ssb> rsa4096/90A79E1B71BC0CB1 2019-03-21 [S] The master key is kept offline and the subkeys are stored in my Yubikey and are used to sign/encrypt messages. What I've tried: 1. Enable "mail.openpgp.allow_external_gnupg" according to [https://wiki.mozilla.org/Thunderbird:OpenPGP:Smartcards https://wiki.mozilla.org/Thunderbird:OpenPGP:Smartcards] 2. Add my key ID to in the "End to End Encryption" section of Account Settings (I've tried key ID of the master key and the signing subkey, both of which don't work) 3. Write a new message, check "Security > Digitally Sign This Message", then click Send. I've checked that the GPGME library (C:\Program Files (x86)\GnuPG\bin\libgpgme-11.dll) is in the PATH environment variable. As Gpg4win only provides 32-bit builds, I also reinstalled the 32-bit version of Thunderbird. Unfortunately, I always get "Unable to send the message, because there is a problem with your personal key. The configured key ID 'xxx' cannot be found on your keyring."

Gekozen oplossing

If you do not get answer here, visit https://thunderbird.topicbox.com/groups/e2ee

Dit antwoord in context lezen 👍 1

Alle antwoorden (4)

Wayne Mery
Wayne Mery
  • Moderator
  • Top 10 Contributor
more options

Gekozen oplossing

If you do not get answer here, visit https://thunderbird.topicbox.com/groups/e2ee

DDoSolitary
DDoSolitary Vraageigenaar
more options

Wayne Mery said
If you do not get answer here, visit https://thunderbird.topicbox.com/groups/e2ee

Thanks for the link. I found some relevant conversations there.

mathias.muehlbacher
mathias.muehlbacher
more options

DDoSolitary said

Wayne Mery said
If you do not get answer here, visit https://thunderbird.topicbox.com/groups/e2ee

Thanks for the link. I found some relevant conversations there.

Could you please share the link to those conversations? I have the same problem but did not find them.

steven.demarco
steven.demarco
more options

Hello, i've got the same issue here. Juste before the update everything was working fine and sadly, now with the 78 version i cannot encrypt/decrypt anymore. Is there some workaround ? (and maybe post a correct solution here) Thanks for anyone help.

Bewerkt door steven.demarco op