1748722 - Unable to import public keys in Thunderbird 91.4.1, get error "Can't read public key file. undefined"

Status: RESOLVED DUPLICATE of bug 1752718

(MailNews Core :: Security: OpenPGP, defect)

Description

[Rob]

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:95.0) Gecko/20100101 Firefox/95.0

Steps to reproduce:

I right-clicked on an OpenPGP .asc file and selected "Import OpenPGP Key". On the "OpenPGP Confirmation" window, I clicked "Import".

Actual results:

I received an "OpenPGP Alert" window reading "Can't read public key file. undefined". The key was not imported. Error console message reads: "Failed to obtain key list from key block in decrypted attachment. undefined decryption.jsm:596:19".

Expected results:

The public key should have been imported. I attempted this with other keys that had been imported prior to upgrading to 91.4.1 (I don't know whether this is causal, and I'm not sure how to check.) This is on Mac OS Monterey (M1-based). I'm able to import the same keys in Thunderbird 78.11.0 (Linux x86_64). I understand that this may be an issue with my individual Thunderbird instance, but I don't know how to check for that. The problem remains present in "Troubleshoot Mode". Any assistance is appreciated.

Comment 1

[Rob]

Update: I've noticed that I am able to import the key from the "Message Security - OpenPGP" pull-down menu in the email message. Even after the key is imported that way, trying to import it from the attachment menu fails with the same error.

Comment 2

[Magnus Melin [:mkmelin]]

See https://wiki.mozilla.org/Thunderbird:OpenPGP#Debugging_.2F_Tracing
Maybe something odd with that particular key? Can you attach it here?

Comment 4

[Rob]

Attachment: enigdbug.txt

Uploaded the enigdbug.txt which covers opening Thunderbird, clicking to import the key, and the last line covers the attempt to confirm import, and then I subsequently get the error.

Comment 5

[Rob]

Hi Magnus, thanks for your response. You now have the enigdbug.txt; I would be ok to share an example key with you, but I don't want to post it publicly, as it has someone else's email address in it. Is there a way I can send it only to you?

To be clear: the key in question is only an example. I'm not able to import any key, including ones that have been imported in the past, using the "attachment" import method. This has worked for me in the past. I suspect that the upgrade to 91.4.1 caused the issue, but I don't have any specific evidence.

I am able to import keys from the "Message Security - OpenPGP" menu in the message, however.

Comment 6

[Magnus Melin [:mkmelin]]

Sure, send it to my email. Please reference this bug.

Comment 7

[Rob]

One additional note: it appears that my Thunderbird instance is having trouble with reading some attachments, rather than this being an encryption key problem. When I double-click on some attachments, e.g. text files ending in ".dat", Thunderbird does nothing, as if I hadn't clicked it at all. I will pursue this as an issue with attachments going forward. Upgraded to 91.5.0, still seeing the same issues. Any other tips on debugging this would be appreciated.

Comment 8

[u617804]

See also similar bug 1751080 ?

Comment 9

[u617804]

See another report with a TB-generated public key

Comment 10

[Rob]

Hi Arvidt, thanks for the new information. I do believe that this bug is similar to bug 1751080. In fact, it seems as though these are true:

For the same key received as an attachment in all of these tests:

0. I remove the key from OpenPGP Manager and close Thunderbird 91.5.0 for Mac.

1. When I first open Thunderbird and attempt to import the key by right-clicking the .asc attachment and selecting "Import OpenPGP Key", I get this error in a pop-up:

OpenPGP Alert
Can't read public key file.
undefined

2. When I try to import the same key by double-clicking on the attachment and clicking "Import" on the "OpenPGP Confirmation" pop-up, I get this error in a pop-up:

OpenPGP Information
Error - decryption failed

3. When I save that key as a file and "Import Public Key(s) From File", it works as expected and imports the key.

Additionally, when I receive an encrypted email and open the "Message Security - OpenPGP" menu from the message itself, I'm able to import the sender key successfully.

Comment 11

[Rob]

Confirming the exact same behavior in 91.5.1.

Comment 12

[Rob]

This appears to be fixed in 91.6.0. I've been unable to duplicate the issue since upgrading to 91.6.0 today.

Comment 13

[Kai Engert [:KaiE:]]

Thanks I assume this was fixed through bug 1752718.