2011373 - Imported OpenPGP revocation ignored until restart

Status: NEW

(MailNews Core :: Security: OpenPGP, defect, P2)

Description

[Kai Engert [:KaiE:]]

Use OpenPGP manager.

• File, import public key: t-pub.asc
• File, import revocation: t-revoke.asc
  -> RNP ignores it, because revocation was made after key expired, debug statement printed on console
• File, import public key: t-new-pub-never.asc
  -> the update key is imported, no longer shown as expired
• Again, File, import revocation: t-revoke.asc
  -> No error message shown on console

(Note I had done the following separately while having the private key: I extended the expiration for one month from now. Then I created the revocation statement t-revoke.asc. Then I changed expiration again to "never expire" and exported t-new-pub-never.asc.)

• view details of the key, it's still shown as valid.

• Reload key cache. Still valid.

• Close key manager, reopen key manager, view key. Still valid

• Quit and restart Thunderbird. View key in key manager -> shown as revoked

Comment 1

[Kai Engert [:KaiE:]]

I think it's more likely that we have a caching bug in Thunderbird, but this needs investigation.

Comment 2

[Magnus Melin [:mkmelin]]

Did you mean to attach those files? (t-pub.asc, t-revoke.asc)

Comment 3

[Kai Engert [:KaiE:]]

yes sorry

Comment 4

[Kai Engert [:KaiE:]]

Attachment: t-pub.asc

Comment 5

[Kai Engert [:KaiE:]]

Attachment: t-revoke.asc

Comment 6

[Kai Engert [:KaiE:]]

Attachment: t-new-pub-never.asc