Bug#1041409: thunderbird: OpenPGP features in v115 requires librnp0 >= 0.17.0 not in archive

[Alper Nebi Yasak]

Package: thunderbird
Version: 1:115.0-1
Severity: important
X-Debbugs-CC: d...@fifthhorseman.net

Dear Maintainer,

I decided to upgrade Thunderbird to the version in experimental, and
noticed that its OpenPGP functionality is completely broken: the Key
Manager is empty, and it doesn't even attempt to decrypt/verify
encrypted/signed messages (at least over external gnupg).

The "Troubleshooting Information" page says the expected minimum version
for the RNP library is 0.17.0, where I had 0.16.3-1 installed as
currently in unstable.

Seeing a 0.17.0~git20220428-1 version for librnp0 in experimental, I
tried installing that. But that doesn't work either, apparently its
source is older than 0.16.1? (Also see bug #1031363).

So I think Thunderbird needs to depend on librnp0 >= 0.17.0 (currently
unversioned), but no such version is in Debian yet. I got it to work by
sloppily packaging the newer source. (The proper package may take a bit,
has a new dependency apparently in NEW -- I'm CC-ing the maintainer.)

Thanks!


-- System Information:
Debian Release: trixie/sid
APT prefers unstable
APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: arm64, armhf, armel, i386

Kernel: Linux 6.4.0-0-amd64 (SMP w/24 CPU threads; PREEMPT)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8),
LANGUAGE=en_GB:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages thunderbird depends on:
ii debianutils 5.8-1
ii fontconfig 2.14.1-4
ii libasound2 1.2.9-1
ii libatk1.0-0 2.48.3-1
ii libc6 2.37-6
ii libcairo-gobject2 1.16.0-7
ii libcairo2 1.16.0-7
ii libdbus-1-3 1.14.8-2
ii libdbus-glib-1-2 0.112-3
ii libevent-2.1-7 2.1.12-stable-8
ii libffi8 3.4.4-1
ii libfontconfig1 2.14.1-4
ii libfreetype6 2.13.0+dfsg-1
ii libgcc-s1 13.1.0-8
ii libgdk-pixbuf-2.0-0 2.42.10+dfsg-1+b1
ii libglib2.0-0 2.74.6-2
ii libgtk-3-0 3.24.37-2
ii libnspr4 2:4.35-1.1
ii libnss3 2:3.91-1
ii libotr5 4.1.1-5
ii libpango-1.0-0 1.50.14+ds-1
ii librnp0 0.17.0-1~1.gbp1d03e6
ii libstdc++6 13.1.0-8
ii libvpx7 1.12.0-1
ii libx11-6 2:1.8.6-1
ii libx11-xcb1 2:1.8.6-1
ii libxcb-shm0 1.15-1
ii libxcb1 1.15-1
ii libxext6 2:1.3.4-1+b1
ii libxrandr2 2:1.5.2-2+b1
ii psmisc 23.6-1
ii x11-utils 7.7+5
ii zenity 3.44.0-3
ii zlib1g 1:1.2.13.dfsg-1

Versions of packages thunderbird recommends:
ii hunspell-en-gb [hunspell-dictionary] 1:7.5.0-1
ii hunspell-en-us [hunspell-dictionary] 1:2020.12.07-2

Versions of packages thunderbird suggests:
ii apparmor 3.0.8-3
ii fonts-lyx 2.3.7-1
ii libgssapi-krb5-2 1.20.1-2

-- no debconf information

[Carsten Schoenert]

Hi Alper,

Am 18.07.23 um 17:20 schrieb Alper Nebi Yasak:

> I decided to upgrade Thunderbird to the version in experimental, and
> noticed that its OpenPGP functionality is completely broken: the Key
> Manager is empty, and it doesn't even attempt to decrypt/verify
> encrypted/signed messages (at least over external gnupg).

ha, by accident I noticed the described behavior just a few hour ago too!
Thanks for trying out Thunderbird from experimental, I expect we will
find a few more glitches like that.

> The "Troubleshooting Information" page says the expected minimum version
> for the RNP library is 0.17.0, where I had 0.16.3-1 installed as
> currently in unstable.

Unfortunately the Thunderbird build system does not do a really good job
on detecting required versions for libraries or equal. And it's mostly
difficult to detect such version bumps by reviewing manually changes
after importing a new version.

> Seeing a 0.17.0~git20220428-1 version for librnp0 in experimental, I
> tried installing that. But that doesn't work either, apparently its
> source is older than 0.16.1? (Also see bug #1031363).
>
> So I think Thunderbird needs to depend on librnp0 >= 0.17.0 (currently
> unversioned), but no such version is in Debian yet. I got it to work by
> sloppily packaging the newer source. (The proper package may take a bit,
> has a new dependency apparently in NEW -- I'm CC-ing the maintainer.)

Your analysis is correct, Thunderbird will need a version constrain on
librnp0. But this requires the package to be available at least in
experimental.

I'll do some work around this and change the build system while
preparing the next upload so it is using the internal shipped librnp
version until Daniel has uploaded a newer version.

--
Regards
Carsten

[Paul Gevers]

Package: thunderbird
Version: 1:115.1.0-1
Followup-For: Bug #1041409

Hi,

I upgraded thunderbird after the latest version migrated to testing
and sending messages fails until I disable signing them. It seems this
issue is still present, despite the switch to the internal version.

The failure message is rather unspecific: "Sending of the message failed."

Paul

-- System Information:
Debian Release: trixie/sid

APT prefers testing
APT policy: (990, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 6.4.0-1-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en

Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages thunderbird depends on:
ii debianutils 5.8-1
ii fontconfig 2.14.1-4

ii kdialog 4:22.12.3-1

ii libasound2 1.2.9-1
ii libatk1.0-0 2.48.3-1
ii libc6 2.37-6
ii libcairo-gobject2 1.16.0-7
ii libcairo2 1.16.0-7
ii libdbus-1-3 1.14.8-2
ii libdbus-glib-1-2 0.112-3
ii libevent-2.1-7 2.1.12-stable-8
ii libffi8 3.4.4-1
ii libfontconfig1 2.14.1-4
ii libfreetype6 2.13.0+dfsg-1

ii libgcc-s1 13.2.0-1
ii libgdk-pixbuf-2.0-0 2.42.10+dfsg-1+b1
ii libglib2.0-0 2.77.1-2
ii libgtk-3-0 3.24.38-2

ii libnspr4 2:4.35-1.1
ii libnss3 2:3.91-1
ii libotr5 4.1.1-5
ii libpango-1.0-0 1.50.14+ds-1

ii libstdc++6 13.2.0-1

ii libvpx7 1.12.0-1
ii libx11-6 2:1.8.6-1
ii libx11-xcb1 2:1.8.6-1
ii libxcb-shm0 1.15-1
ii libxcb1 1.15-1
ii libxext6 2:1.3.4-1+b1
ii libxrandr2 2:1.5.2-2+b1
ii psmisc 23.6-1
ii x11-utils 7.7+5

ii zlib1g 1:1.2.13.dfsg-1

Versions of packages thunderbird recommends:

ii hunspell-en-us [hunspell-dictionary] 1:2020.12.07-2
ii hunspell-nl [hunspell-dictionary] 2:2.20.19-2

[Paul Gevers]

Hi,

Moving to bug 1043138.

On 12-08-2023 08:14, Carsten Schoenert wrote:
> Am 10.08.23 um 21:57 schrieb Paul Gevers:
> There is #1043138 which was about a similar problem, seems there the
> issue could be solved by re-importing the secret key. Alexis (Reply #20)
> could solve his issue too by a re-import.

I'm trying to do that, but it's a fight.

>> The failure message is rather unspecific: "Sending of the message
>> failed."
>

> Open the JS console might bring more clue what probably might be go wrong.
>
> Crtl + Shift + j

For the record:

mimeEncrypt.js: caught exception: Error
Message: 'failure in finishCryptoEncapsulation, exitCode: -1'
File: chrome://openpgp/content/modules/mimeEncrypt.jsm
Line: 537
Stack:
finishCryptoEncapsulation@chrome://openpgp/content/modules/mimeEncrypt.jsm:537:15
createMessageFile@resource:///modules/MimeMessage.jsm:90:27


Error: failure in finishCryptoEncapsulation, exitCode: -1
mimeEncrypt.jsm:537:15
mailnews.send: NS_ERROR_XPC_JAVASCRIPT_ERROR_WITH_DETAILS: [JavaScript
Error: "failure in finishCryptoEncapsulation, exitCode: -1" {file:
"chrome://openpgp/content/modules/mimeEncrypt.jsm" line:
537}]'[JavaScript Error: "failure in finishCryptoEncapsulation,
exitCode: -1" {file: "chrome://openpgp/content/modules/mimeEncrypt.jsm"
line: 537}]' when calling method:
[nsIMsgComposeSecure::finishCryptoEncapsulation]
createMessageFile resource:///modules/MimeMessage.jsm:90
MessageSend.jsm:137:32
mailnews.send: Sending failed; , exitCode=2153185313, originalMsgURI=
MessageSend.jsm:362:32
Error: rnp_op_sign_add_signature failed RNP.jsm:3535:19
mailnews.smtp:
error { target: TCPSocket, isTrusted: true, name: "NetworkTimeoutError",
message: "Network", errorCode: 2152398862, srcElement: TCPSocket,
currentTarget: TCPSocket, eventPhase: 2, bubbles: false, cancelable:
false, … }
SmtpClient.jsm:434:17

Paul