stuck with Enigmail 2.0.12 (on TB 60.8.0)

[marianoju]

I have several problems.

1) I have noticed that my Enigmail add-on has not auto-updated in some time. I am currently using Enigmail 2.0.12 and Thunderbird 60.8.0 does not find any updates for this add-on. Is this a Thunderbird problem?

2) I have manually downloaded enigmail-2.1.2-tb.xpi for Thunderbird 60 (Linux x86-64) from https://www.enigmail.net/index.php/en/download-old-versions. I have attempted to install from file but this fails with the following error message:

“This add-on could not be installed because is appears to be corrupt.”

Why is that?

3) I have download the corresponding signature file enigmail-2.1.2-tb.xpi.asc but gpg can not verify the signature because

gpg: Signature made So 18 Aug 2019 17:55:23 CEST
gpg:                using RSA key 4F9F89F5505AC1D1A260631CDB1187B9DD5F693B
gpg: Can't check signature: No public key

Where can I find the public key?

4) I have been unable to receive a copy of the public key (see above) from several public key servers via commandline:

gpg --keyserver pgp.mit.edu --recv 4F9F89F5505AC1D1A260631CDB1187B9DD5F693B
gpg: keyserver receive failed: No data

gpg --keyserver hkp://keys.gnupg.net --recv-keys 0xDB1187B9DD5F693B
gpg: key DB1187B9DD5F693B: 15 duplicate signatures removed
gpg: key DB1187B9DD5F693B: 100135 signatures not checked due to missing keys
gpg: no writable keyring found: Not found
gpg: error reading '[stream]': General error
gpg: Total number processed: 0

1. The public key I have found on keyserver.ubuntu.com via browser interface is >20 MB

https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x4f9f89f5505ac1d1a260631cdb1187b9dd5f693b

and seahorse (GNOME front end for GnuPG) fails to import this key.

Import via gpg fails as well:

gpg --import 0x4f9f89f5505ac1d1a260631cdb1187b9dd5f693b.asc
    gpg: key DB1187B9DD5F693B: 23 duplicate signatures removed
gpg: key DB1187B9DD5F693B: 100137 signatures not checked due to missing keys
gpg: no writable keyring found: Not found
gpg: error reading '0x4f9f89f5505ac1d1a260631cdb1187b9dd5f693b.asc': General error
gpg: import from '0x4f9f89f5505ac1d1a260631cdb1187b9dd5f693b.asc' failed: General error
gpg: Total number processed: 0

[Patrick Brunschwig]

Enigmail 2.0.12 is for Thunderbird 60.x and Enigmail 2.1.2 is for Thunderbird 68.x. I.e. you can't install Enigmail 2.1.2 on Thunderbird 60.8.0.

To import the key for verification of signatures, it's best to download the key from the download web page, or alternatively from keys.openpgp.org. Unfortunately, my key got spoiled on (old) public keyservers - which cannot be undone.