Re: Help with email signing --- encryption works, signing does not (secret key not available)
John Clizbe <John <at> Mozilla-Enigmail.org>
2008-02-02 20:59:26 GMT
Jim Luby wrote:
> Hello,
> I recently installed the Enigmail add-on to Thunderbird (Windows XP
> system). I have gnuPg 1.4.8 installed and functioning. I created a key
> pair and am able to encrypt and decrypt files (in the Windows shell) as
> well as sign and verify files (also in the Windows shell). I also have
> been successful at encrypting email using Enigmail and my established
> public/secret key pair show up in the Key Management window. However, I
> cannot get email signing to work. When I try to send a signed email (by
> choosing "Sign Message") a window pops open with the following error
> message: "clearsign failed: secret key not available". I'm puzzled as to
> how I can decrypt email sent to myself (which requires the secret key)
> yet I cannot sign email (which to my understanding also requires the
> secret key).
It looks like GnuPG can't tell which key to sign with. Possibly, your "from'
address doesn't match a UserID on the key(?).
Under Enigmail Preferences, make sure "Never ask for any passphrase' on the
basic tab is not checked.
On the Advanced tab (may need to select the 'Display Explert Settings' box on
the Basic tab first), make sure 'Use gpg-agent for passphrases' is not selected.
On the Key Selection tab, 'By rules and email addresses' should be selected.
Lastly, on the OpenPGP Security tab for the email account you are sending from
(Tools --> Account Settings), select the 'Use specific OpenPGP key ID' button
and enter your key id, eg 0xDecafBad, in the box below.
(Continue reading)