Page MenuHome GnuPG
Create Task
Maniphest T3963

Invalid Crypto Engine - ( Xubuntu 18.04 ) version of GPG4USB 0.3.3.2 & 0.3.3.1
Closed, InvalidPublic
Actions

Description

I installed (and use daily) GPG4USB, it's a GUI for GPG, encrypt, unencrypt, sign, verify and others tasks. (manage keys)
https://www.gpg4usb.org/

The issue started when I updated Xubuntu from 16.04 to 18.04
I tested
./start_linux_32bits
./start_linux_64bits

with latest version of gpg4usb (0.3.3.2) and with 0.3.3.1

./start_linux_64bit

[Error] Source:  GPGME  String:  "Invalid crypto engine" 
[Error] Source:  GPGME  String:  "Invalid crypto engine" 
[Error] Source:  GPGME  String:  "Invalid crypto engine"

could be related to GPGME, and how gpg4usb interact with it.

Xubuntu is updated

ii gpg 2.2.4-1ubuntu1 amd64 GNU Privacy Guard -- minimalist public key operations
ii gpg-agent 2.2.4-1ubuntu1 amd64 GNU privacy guard - cryptographic agent
ii gpg-wks-client 2.2.4-1ubuntu1 amd64 GNU privacy guard - Web Key Service client
ii gpg-wks-server 2.2.4-1ubuntu1 amd64 GNU privacy guard - Web Key Service server
ii gpgconf 2.2.4-1ubuntu1 amd64 GNU privacy guard - core configuration utilities
ii gpgsm 2.2.4-1ubuntu1 amd64 GNU privacy guard - S/MIME version
ii gpgv 2.2.4-1ubuntu1 amd64 GNU privacy guard - signature verification tool
ii libgpg-error0:amd64 1.27-6 amd64 library for common error values and messages in GnuPG components
ii libgpg-error0:i386 1.27-6 i386 library for common error values and messages in GnuPG components
ii libgpgme11:amd64 1.10.0-1ubuntu1 amd64 GPGME - GnuPG Made Easy (library)
ii libgpgmepp6:amd64 1.10.0-1ubuntu1 amd64 C++ wrapper library for GPGME

Event Timeline

dcialdella created this task.May 4 2018, 9:20 AM
• werner closed this task as Invalid.May 4 2018, 10:55 AM
• werner added a subscriber: • werner.

This bug tracker does not support gpg4usb - please use their bug tracker.

aheinecke reopened this task as Open.EditedMay 4 2018, 6:24 PM
aheinecke claimed this task.
aheinecke triaged this task as Normal priority.
aheinecke added a project: gpgme.
aheinecke added a subscriber: aheinecke.

I'll volunteer to look into it. IMO "Invalid Crypto Engine" points definitely to a GPGME bug and I want to know whats going on there.

I have an Ubuntu 18.04 VM at hand anyway.

aheinecke closed this task as Invalid.May 4 2018, 6:42 PM

OOooh yeee.
Ok. Didn't know how bad gpg4usb really is.
I looked into it. Gpg4usb distributes their own binary GPGME version https://github.com/gpg4usb/gpg4usb/tree/master/linbuild/lib I don't even know which version that is. They are in violation of the GPL as they don't offer the source code of that GPGME version.

So, don't use it please what they do is horrible from a security standpoint. Try using Kleopatra (which I personally maintain). And if it does not work for your use case please let us know what your use case is and we can try to make it better for you. :-)

But indeed for gpg4usb you can't expect help here. They are very likely shipping a horribly outdated version with bugs that have since been fixed.

• werner added a comment.May 4 2018, 7:36 PM

It seems to be 1.1.6 from 2010 or so. They use gpg 1.4.20 which misses a critical security fix.

BenM added a subscriber: BenM.May 5 2018, 5:27 AM

I suspect gpg4usb is a dead project anyway. I've been on their mailing list for a while and according to my records the last post from the pseudonymous author(s) is from October, 2016. I'm not sure how much of that GPL breach is intentional or just a result of web services going offline and not being restored.

Still, their domain is registered to a contact in Niedersachsen, so you can probably look a little closer than I can.

dcialdella added a comment.May 5 2018, 12:27 PM

I 'll try GPA and Kleopatra, I hope will do the same tasks.
thanks anyway.

dcialdella added a comment.May 6 2018, 7:20 PM
In T3963#114101, @aheinecke wrote:

OOooh yeee.
Ok. Didn't know how bad gpg4usb really is.
I looked into it. Gpg4usb distributes their own binary GPGME version https://github.com/gpg4usb/gpg4usb/tree/master/linbuild/lib I don't even know which version that is. They are in violation of the GPL as they don't offer the source code of that GPGME version.

So, don't use it please what they do is horrible from a security standpoint. Try using Kleopatra (which I personally maintain). And if it does not work for your use case please let us know what your use case is and we can try to make it better for you. :-)

But indeed for gpg4usb you can't expect help here. They are very likely shipping a horribly outdated version with bugs that have since been fixed.

Im using Kleopatra and GPA now, I have to learn a bit because some simple tasks are not really easy for a daily usage.
For examply, encrypt a text using the same keys.
Anyway, thanks

aheinecke added a comment.May 6 2018, 7:29 PM

The latest Version of Kleopatra has a "Notepad" View that should do what you want. E.g. If you decrypt something in there it preselects the keys the message was encrypted to when you encrypt it again.

Looks like this: http://files.intevation.de/users/aheinecke/notepad.gif

I packaged Kleopatra and the latest GnuPG for Ubuntu 18.04 last week. If you want you can:

sudo -s
 echo "deb http://apt.intevation.de bionic gnupg-kleopatra" > \
     /etc/apt/sources.list.d/gnupg-kleopatra.list
 wget -O - https://ssl.intevation.de/Intevation-Distribution-Key.asc | apt-key add -
 apt-get update
 apt-get install kleopatra
 apt-get dist-upgrade -y
dcialdella added a comment.May 6 2018, 7:40 PM

I downloaded it and I' m using it.
Nice feature the "notepad".... easier for encrypt/sign.

Can' t define the Standard Key to use. still learning

-----BEGIN PGP MESSAGE-----
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Crfq

-----END PGP MESSAGE-----