<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN" "http://www.w3.org/TR/REC-html40/strict.dtd">
<html><head><meta name="qrichtext" content="1" /><style type="text/css">
p, li { white-space: pre-wrap; }
</style></head><body style=" font-family:'Ubuntu'; font-size:9pt; font-weight:400; font-style:normal;">
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">----- Original Message -----<br /></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><a name="yui_3_2_0_20_134817236680197"></a>> From: Steve Crook <steve@mixmin.net><br />> To: remops@lists.mixmin.net<br />> Cc: <br />> Sent: Thursday, September 20, 2012 2:42 PM<br />> Subject: Re: [Remops] zax nymserv error: sign+encrypt failed<br />> <br />> On Thu, Sep 20, 2012 at 02:14:05PM -0600, Breaka.net Anonymous Remailer <br />> Administration wrote:<br />>> OK. Adding the X-Original-To header by Exim system_filter works just fine. <br />>> Nymserv begins processing the in-coming config message but faills with the <br />>> following error:<br />> In the next release I'll make the header choice configurable. I<br />> hardcoded X-Original-To because my MTA adds it.<br />> <br />>> 2012-09-20 13:17:55 DEBUG Signing and Encrypting message for <br />>> 74B8301AE4F18D74A5E874B4176650376BC25290<br />>> 2012-09-20 13:17:55 ERROR GnuPG returned an error whilst attempting to <br />>> signcrypt a message. The error was:<br />>> gpg: no default secret key: secret key not available<br />>> gpg: [stdin]: sign+encrypt failed: secret key not available<br />>> <br />>> I tried re-creating the GPG key and updating the fingerprint in .nymservrc <br />> but <br />>> it continues to fail with the same error.<br />>> <br />>> I can see the secret key when I list the keys.<br />>> <br />>> Any ideas what's stopping it this time?<br />> <br />> Probably because your secret key is on the wrong keyring. By default<br />> GnuPG will use ~/.gnupg as its path. The nymserver's default is<br />> ~/nymserv/keyring. You could export the key and reimport it to the<br />> correct keyring or regenerate a new one in situ. In either case you<br />> probably want to use the 'gpg --homedir' option.<br />> <br />> If you want to put the keyring in a different location, such as an<br />> encrypted disk, you can use the following option in .nymservrc:-<br />> <br />> [paths]<br />> keyring: /encrypted_disk/nymserver/keyring<br /></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">I did the above. Repeated it again to make sure I did it right.</p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Using "--homedir=/home/breaka/nymserv/keyring" to generate and manage the keys. To be safe, I tried putting the keyrings in .gnupg to see if the nymserver was looking there but that made no difference.</p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Also, double checked the fingerprint in the .nymservrc and it was correct. So was the keyring path.</p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">I am currently trying using the key ID instead of the fingerprint to see if that makes a difference.</p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">I am assuming from the above that:</p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">1. Nymserv uses *only* the keys and keyrings in nymserv/keyring. The ~/.gnupg is ignored completely.</p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">2. Nymserv compares the key ID or fingerprint to the secret keys in nymserv/keyring. In my case, there should only be one (1) secret keys in this keyring,</p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Let you know what happens in my next test.</p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">-ken</p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">-- </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Breaka.net Anonymous Remailer</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">http://www.breaka.net</p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p></body></html>