545 Followers
0 Following
310 Posts
The Trinity Desktop Environment (TDE) project is a computer desktop environment for Unix-like operating systems with a primary goal of retaining the function and form of traditional desktop computers.
websitehttps://www.trinitydesktop.org/
join ushttps://www.trinitydesktop.org/helpwanted.php
donatehttps://www.trinitydesktop.org/donate.php

KMail was not able to correctly verify the GPG signatures of messages that were both encrypted and signed, although it had no problems with signed but non encrypted messages. This has now been fixed and will be part of the upcoming #TDE R14.1.6 release.
More info can be found at https://mirror.git.trinitydesktop.org/gitea/tde/tdepim/issues/187 and https://mirror.git.trinitydesktop.org/gitea/tde/tdepim/issues/190.

Updated PSB/PTB packages are or will soon be available on the #Trinity mirrors.

KMail fails to verify GPG signatures of certain types of encripted messages

I recently started using KMail in conjunction with GPG to encrypt and sign outgoing emails, as well as decrypt and verify signatures of incoming emails. While encryption, decryption, and signing works as expected, verifying signatures does not. Let's say I have a contact whose all public GPG keys are imported into my GPG keyring - this includes the master certifying [C] key, as well as authentication [A], signing [S], and encryption [E] sub-keys. I stress that the certifying key has no signing capability and there is a separate signing sub-key. This differs from GPG defaults, which, when generating a master key, give it both certifying and signing capability [CS]. However, a common practice is to remove the signing capability from the master key and have a dedicated signing key - this setup follows that practice. When I receive email signed with [S] subkey, KMail cannot verify the signature; it claims that while the signature is valid, the key with which the message was signed is unknown. However, the supposedly unknown key is a signing sub-key imported into my keyring. This suggests that when KMail tries to verify a signature, it only looks at master keys present in GPG keyring, but not their sub-keys. I think this is wrong. Other observations: * If email comes from someone, whose master key is both certifying and signing [CS], the signature is verified without problems. * An interesting case is signing of sent emails. Email is signed correctly, but the reported key fingerprint is that of a master key, not the signing key. This is where my GPG knowledge reaches its limit: my master key only has [C] capability, but not [S] - therefore it should not be possible to sign anything with it. I also note, that if I send email to myself, KMail can correctly verify the signature, i.e. based on the fingerprint of a master key it correctly finds the signing subkey. Putting it all together, it seems that KMail assumes that when an email is signed, fingerprint of the master key needs to be provided. Given master key fingerprint, KMail can find a signing sub-key. However, it does not search subkeys by default, so when the signing fingerprint is that of a subkey, KMail cannot find it in the keyring. I note, that most other email clients (or: essentially all signed emails that I receive) provide only the signing subkey fingerprint, and thus their signatures cannot be verified. Please take these conjectures with a grain of salt though: I am not a GPG expert, nor am I knowledgeable about KMail's internals.

TDE Gitea Workspace
@Dutchnugget it looks great, isn't it? 🤭
@Dutchnugget Wiki updated for Debian, Devuan, Ubuntu and Raspbian. Thanks again.
@Dutchnugget Thanks for pointing that out, looks like the wiki needs a bit of an update 🙂

Info for #TDE users on Debian-like distros (either PSB/PTB or the next stable release).

In the last couple of weeks there has been some package renaming to better comply with Debian conventions. If you are experiencing #Trinity-related package conflicts while updating your system, please try one of the following methods:

1. apt-get full-upgrade
2. aptitude upgrade
3. apt upgrade (should be fine)
4. from aptitude TUI, use `U`

Few packages are affected so far and there may be some more coming.

@Dutchnugget No Great, glad that it worked this time 🙂
@Dutchnugget Didn't realize it came from a Commodore 64 game cover. I like both Commodore 64 and snooker 🙂 Steve Davis was one of my first favorites.
@Dutchnugget great profile picture, btw 😉
We are pleased to announce that #TDE R14.1.5 is now available on @gentoo for building. The R14.1.x branch of the Gentoo packaging repository has been updated to provide ebuild scripts for the latest stable version of #Trinity. At the same time, ebuild scripts for R14.1.2 have been removed. For more info, check out the packaging code at https://mirror.git.trinitydesktop.org/gitea/TDE/tde-packaging-gentoo/src/branch/r14.1.x
@Dutchnugget I don't use Linux Mint but TDE definitely runs on Debian and Ubuntu, so it should pretty much be ok also on LM. What problem did you have? It also run inside VirtualBox, so it is not a VM issue