Page MenuHome GnuPG

Kleopatra: Adjust folder name in archive decryption feedback for single folder content
Testing, NormalPublic

Description

The archive decryption feedback includes the target folder name, which is confusing, if the archive contains exactly one folder with a different name (see T8022: Kleopatra: Extract a tar.gpg archive consisting of only one folder directly into a given directory).
It would be helpful to always display the resulting folder name, otherwise the user has no chance to know, what to search for.

To reproduce:

  1. Sign/Encrypt Folder
  2. Rename the archive file
  3. Extract the renamed archive file

Details

Version
gpg4win-5.0.2-beta-2 @ win11

Event Timeline

timegrid created this object with edit policy "Contributor (Project)".
ebo triaged this task as Normal priority.Fri, Mar 6, 12:05 PM
ebo added a subscriber: ebo.

as T8022 was backported, this one should be backported, too, if possible. I'll add the tag

It's impossible to know beforehand (i.e. before the user clicked Save) how the folder is going to be called because it might get a suffix to avoid a collision and this cannot be checked before the user clicks Save. I suggest to remove the useless information where the archive was extracted because it's a temporary location. Instead we could add a message box which tells the user the actual location after the data was moved there.

ebo mentioned this in Unknown Object (Phriction Wiki Document).Wed, Mar 11, 10:05 AM

ok, lets go with the message box.

And of course delete "as FILENAME" from the decryption message.

ikloecker moved this task from Backlog to WIP on the gpd5x board.

It's not that simple. The user could have decrypted multiple archives. Showing an additional message box after all decrypted archives have been moved to the final destination somehow doesn't feel right. And what if an archive and a regular file were decrypted? Should the additional message box also show the final destination of the regular file? I think this needs more thought.

To fix the original problem I would instead revert the change that avoids the additional folder in case the internal folder has a different name than the archive. This way we avoid confusion if someone thinks it's a good idea to rename the archive. In fact, this could even be used as attack vector to foist a folder with a certain name on an inattentive user by using a non-suspicious archive name. (Coming from tarballs I expect that the tarball is called exactly like the packaged folder, but Windows users might have different expectations.)

Sound sensible. Ok, then this ticket will only revert T8022 for archives which were renamed.

Any improvements in the information to the user will have to wait for T7786: Draft: Kleopatra: improvements of signature verification result messages

ikloecker changed the task status from Open to Testing.Thu, Mar 19, 12:03 PM
ikloecker claimed this task.
ikloecker moved this task from Backlog to WIP on the gpd5x board.

To avoid confusion the outer folder is now kept if the name of the archived folder doesn't match the name of the archive.

Backported for VSD 3.4

ikloecker mentioned this in Unknown Object (Maniphest Task).Mon, Mar 23, 8:53 AM