Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Not encrypting to additional users #653

Open
WIcheese opened this issue Sep 17, 2023 · 0 comments
Open

Not encrypting to additional users #653

WIcheese opened this issue Sep 17, 2023 · 0 comments
Labels

Comments

@WIcheese
Copy link

Describe the bug
Adding additional users to a subfolder does not work. The .gpg-id file gets created with the proper key thumbprints, the re-encrypt process appears to happen (I have to touch my YubiKey once per entry in the folder), but neither existing nor new entries are ever accessible with the additional key. Everything is still only encrypted to the parent folder.

To Reproduce
Steps to reproduce the behavior:

  1. Start with an existing pass store, encrypted to one user key. Let's call it Key 1.
  2. Generate a keypair, Key2, in Kleopatra and make sure it works to encrypt and decrypt data everywhere but QtPass
  3. Create a subfolder, lets call it TestFolder, within the existing password store
  4. Create some entries in TestFolder
  5. Right click TestFolder in QtPass and click Users
  6. Key1 is already checked. Check Key2 and close.
  7. If any entries already exist, it will make you unlock Key1 with its passphrase. If Key1 is on a YubiKey with a touch policy you'll have to touch the YubiKey once per each entry that exists in TestFolder. So it seems to be re-encrypting everything
  8. Check the .gpg-id in TestFolder, Key1 and Key2 are both there
  9. Try to open one of the entries, it will only allow you to decrypt it with Key1.
  10. Create a new entry in TestFolder
  11. Even the new entry is only able to be decrypted with Key1
  12. Right click TestFolder and go to users - you'll see it doesn't even show Key2 checked

Expected behavior
QtPass should encrypt to the user keys that were selected for that folder, not the root folder of the password store.

Desktop (please complete the following information):

  • Windows 11 Pro with gpg4win

Additional context
The issue completely breaks varying user access to different folders. It is present on the new draft 1.4.0 as well as the stable 1.3.2

@WIcheese WIcheese added the bug label Sep 17, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant