publicvoit,
@publicvoit@graz.social avatar

If you're using #Orgmode with #gpg encryption, you need to read https://irreal.org/blog/?p=11827 by #irreal about the current issue with #GnuPG 2.4.1.

I noticed the bug myself already in #NixOS. 😔

In this case, it's good to have still a Debian machine not running the latest versions.

tzz,

@publicvoit @nickanderson I advocated years ago, and still think it’s the right move, for to handle encryption internally (all the functions are already there from the GnuTLS library) instead of relying on the external tool.

galdor,
@galdor@emacs.ch avatar

@tzz @publicvoit @nickanderson

Supporting some kind of encryption is easy. Supporting PGP encryption and signing would be a huge endeavor. Hence the value of using GnuPG as an external program.

And yes PGP is obsolete and should be replaced with something much simpler using modern cryptographic primitives, but as usual no one is doing the job, so in the mean time we’re stuck with GnuPg.

tzz,

@galdor @publicvoit @nickanderson I believe the great majority of or any users do not need PGP’s complexity and providing a simple alternative would be very valuable. My attempts were not successful.

publicvoit,
@publicvoit@graz.social avatar

@tzz @galdor @nickanderson I think I agree with the -only restriction.

However, in my case, I'm using my setup also for email workflows and file encryption outside of Emacs. With that, I do have some advantages when using only one encryption keyring from .

YMMV

If there would be an Emacs-specific alternative, I'd still switch to it I guess. (Depends on the implementation details.)

AngryAnt,
@AngryAnt@mastodon.gamedev.place avatar

@publicvoit Why not just downgrade that package on your NixOS install?

publicvoit,
@publicvoit@graz.social avatar

@AngryAnt I still need to figure out how this can be done. NixOS seems to be cool but very hard to learn. Easy things from other distros like pinning a package version results in half a day of research, I guess.

omidmnz,

@publicvoit @AngryAnt I am using the following overlay to create a new package gnupg240, which I add to home-manager's programs.emacs.extraPackages.

    gnupg240 = prev.gnupg.overrideAttrs (old: rec {<br></br>      inherit (old) pname;<br></br>      version = "2.4.0";<br></br>      src = final.fetchurl {<br></br>        url = "mirror://gnupg/gnupg/${pname}-${version}.tar.bz2";<br></br>        hash = "sha256-HXkVjdAdmSQx3S4/rLif2slxJ/iXhOosthDGAPsMFIM=";<br></br>      };<br></br>    });<br></br>

You could override the gnupg package itself, but that can trigger a rebuild of other packages, including systemd. This essentially reverts this commit: https://github.com/NixOS/nixpkgs/commit/dce1a85956e797ecee5dcd174c12fa9560fd5836

publicvoit,
@publicvoit@graz.social avatar

@omidmnz @AngryAnt Thank you very much. I think I understand what's going on in your snippet and tomorrow, I might have time to try out to integrate it into my configuration: https://github.com/novoid/nixos-config

I'm not sure if your HM method works at my side because I tend to use gnupg via NixOS and not via HM for some reason I can't remember.

mykhaylo,
@mykhaylo@fosstodon.org avatar

@publicvoit not just org-mode, of you want to write to any gpg encrypted file

publicvoit,
@publicvoit@graz.social avatar

@mykhaylo Well, that's great because there's a higher chance of a short term fix.

nickanderson,
@nickanderson@fosstodon.org avatar

@publicvoit @mykhaylo the comments in the reddit thread seemed to indicate the issue is specific to symmetric encryption. My impression is it also wouldn't affect encrypted headings in org.

publicvoit,
@publicvoit@graz.social avatar

@nickanderson @mykhaylo At least my issue at hand is that I may decrypt :crypt:-headings, modify them but when trying to save (encrypt), I get an error or the whole heading content is gone.

nickanderson,
@nickanderson@fosstodon.org avatar

@publicvoit @mykhaylo are you encrypting with a password or a key?

I'll have to try this myself, I use crypt tag, but not daily. Plus I'm still on emacs 28.

publicvoit,
@publicvoit@graz.social avatar

@nickanderson @mykhaylo I'm encrypting a handful Org-mode headings using the :crypt: tag with a specific OpenPGP-Orgmode-encryption key that is protected by a gnupg passphrase.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • orgmode
  • DreamBathrooms
  • mdbf
  • ngwrru68w68
  • magazineikmin
  • thenastyranch
  • rosin
  • khanakhh
  • osvaldo12
  • Youngstown
  • slotface
  • Durango
  • kavyap
  • InstantRegret
  • tacticalgear
  • provamag3
  • ethstaker
  • cisconetworking
  • modclub
  • tester
  • GTA5RPClips
  • cubers
  • everett
  • normalnudes
  • megavids
  • Leos
  • anitta
  • JUstTest
  • lostlight
  • All magazines