Questo sito potrebbe offrire funzionalità limitate durante le operazioni di manutenzione per migliorare l'esperienza utente. Se un articolo non risolve il tuo problema e vuoi richiedere supporto, la nostra comunità di supporto è pronta ad aiutarti tramite @FirefoxSupport su Twitter e /r/firefox su Reddit.

Cerca nel supporto

Attenzione alle mail truffa. Mozilla non chiederà mai di chiamare o mandare messaggi a un numero di telefono o di inviare dati personali. Segnalare qualsiasi attività sospetta utilizzando l'opzione “Segnala abuso”.

Ulteriori informazioni

Questa discussione è archiviata. Inserire una nuova richiesta se occorre aiuto.

Email encryption with smart card: The secret key that is required to decrypt this message is not available.

  • 1 risposta
  • 1 ha questo problema
  • 1 visualizzazione
  • Ultima risposta di Matt

more options

I'm trying to set up Thunderbird (version 91.3.2) with email encryption and an existing GPG key on a smartcard.

I have followed the corresponding article on wiki.mozilla.org to set up the encryption in Thunderbird, but trying to decrypt an encrypted email only shows a red banner: "The secret key that is required to decrypt this message is not available.". If I try to send an encrypted message, I simply get an error message: "Sending of the message failed.".

I have double and triple checked whether the manually set up key ID matches the one in GPG, and it does. I have tried to use either the parent key ID, or the encryption subkey ID, but to no avail.

I have started thunderbird with an environment variable set: GPGME_DEBUG=9:/dev/stdout In fact, requests to encrypt and decrypt emails are sent to GPG, but (between lots of noise) there are error messages: If I try to encrypt an email, I get "GPGME 20211215T175951 5A67E gpgme_get_key:1374: error: End of file <GPGME>". If I try to decrypt an email, I get "GPGME 20211215T180601 5DA8A gpgme_op_decrypt_ext:182: error: Not supported <GPGME>".

These error messages seem to indicate that GPGME is in fact unable to find the corresponding key in its keyring - but if I use `gpg --list-secret-keys`, the key is there. I can even save the email in thunderbird, and decrypt it manually from the commandline, so the gpg setup on my system seems to be fine, but there seems to be some disconnect between thunderbird and the GPG keyring on my system.

Any idea what I might have configured wrong here?

I'm trying to set up Thunderbird (version 91.3.2) with email encryption and an existing GPG key on a smartcard. I have followed [https://wiki.mozilla.org/Thunderbird:OpenPGP:Smartcards#Configure_an_email_account_to_use_an_external_GnuPG_key the corresponding article on wiki.mozilla.org] to set up the encryption in Thunderbird, but trying to decrypt an encrypted email only shows a red banner: "The secret key that is required to decrypt this message is not available.". If I try to send an encrypted message, I simply get an error message: "Sending of the message failed.". I have double and triple checked whether the manually set up key ID matches the one in GPG, and it does. I have tried to use either the parent key ID, or the encryption subkey ID, but to no avail. I have started thunderbird with an environment variable set: GPGME_DEBUG=9:/dev/stdout In fact, requests to encrypt and decrypt emails are sent to GPG, but (between lots of noise) there are error messages: If I try to encrypt an email, I get "GPGME 20211215T175951 5A67E gpgme_get_key:1374: error: End of file <GPGME>". If I try to decrypt an email, I get "GPGME 20211215T180601 5DA8A gpgme_op_decrypt_ext:182: error: Not supported <GPGME>". These error messages seem to indicate that GPGME is in fact unable to find the corresponding key in its keyring - but if I use `gpg --list-secret-keys`, the key is there. I can even save the email in thunderbird, and decrypt it manually from the commandline, so the gpg setup on my system seems to be fine, but there seems to be some disconnect between thunderbird and the GPG keyring on my system. Any idea what I might have configured wrong here?

Tutte le risposte (1)

more options

I suggest you ask where the experts in encryption are. https://thunderbird.topicbox.com/groups/e2ee