為了改善您的使用體驗,本網站正在進行維護,部分功能暫時無法使用。若本站的文件無法解決您的問題,想要向社群發問的話,請到 Twitter 上的 @FirefoxSupport 或 Reddit 上的 /r/firefox 發問,我們的社群成員將很快會回覆您的疑問。

搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊,或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

了解更多

Email encryption with smart card: The secret key that is required to decrypt this message is not available.

  • 1 回覆
  • 1 有這個問題
  • 3 次檢視
  • 最近回覆由 Matt

more options

I'm trying to set up Thunderbird (version 91.3.2) with email encryption and an existing GPG key on a smartcard.

I have followed the corresponding article on wiki.mozilla.org to set up the encryption in Thunderbird, but trying to decrypt an encrypted email only shows a red banner: "The secret key that is required to decrypt this message is not available.". If I try to send an encrypted message, I simply get an error message: "Sending of the message failed.".

I have double and triple checked whether the manually set up key ID matches the one in GPG, and it does. I have tried to use either the parent key ID, or the encryption subkey ID, but to no avail.

I have started thunderbird with an environment variable set: GPGME_DEBUG=9:/dev/stdout In fact, requests to encrypt and decrypt emails are sent to GPG, but (between lots of noise) there are error messages: If I try to encrypt an email, I get "GPGME 20211215T175951 5A67E gpgme_get_key:1374: error: End of file <GPGME>". If I try to decrypt an email, I get "GPGME 20211215T180601 5DA8A gpgme_op_decrypt_ext:182: error: Not supported <GPGME>".

These error messages seem to indicate that GPGME is in fact unable to find the corresponding key in its keyring - but if I use `gpg --list-secret-keys`, the key is there. I can even save the email in thunderbird, and decrypt it manually from the commandline, so the gpg setup on my system seems to be fine, but there seems to be some disconnect between thunderbird and the GPG keyring on my system.

Any idea what I might have configured wrong here?

I'm trying to set up Thunderbird (version 91.3.2) with email encryption and an existing GPG key on a smartcard. I have followed [https://wiki.mozilla.org/Thunderbird:OpenPGP:Smartcards#Configure_an_email_account_to_use_an_external_GnuPG_key the corresponding article on wiki.mozilla.org] to set up the encryption in Thunderbird, but trying to decrypt an encrypted email only shows a red banner: "The secret key that is required to decrypt this message is not available.". If I try to send an encrypted message, I simply get an error message: "Sending of the message failed.". I have double and triple checked whether the manually set up key ID matches the one in GPG, and it does. I have tried to use either the parent key ID, or the encryption subkey ID, but to no avail. I have started thunderbird with an environment variable set: GPGME_DEBUG=9:/dev/stdout In fact, requests to encrypt and decrypt emails are sent to GPG, but (between lots of noise) there are error messages: If I try to encrypt an email, I get "GPGME 20211215T175951 5A67E gpgme_get_key:1374: error: End of file <GPGME>". If I try to decrypt an email, I get "GPGME 20211215T180601 5DA8A gpgme_op_decrypt_ext:182: error: Not supported <GPGME>". These error messages seem to indicate that GPGME is in fact unable to find the corresponding key in its keyring - but if I use `gpg --list-secret-keys`, the key is there. I can even save the email in thunderbird, and decrypt it manually from the commandline, so the gpg setup on my system seems to be fine, but there seems to be some disconnect between thunderbird and the GPG keyring on my system. Any idea what I might have configured wrong here?

所有回覆 (1)

more options

I suggest you ask where the experts in encryption are. https://thunderbird.topicbox.com/groups/e2ee