PGP plugin 1.6 does not work on Gajim (Flatpak)

@andre asked me to describe the main PGP issue which is different from the #621 (closed). PGP plugin 1.6 is not working at Gajim (Flatpak). I test it on Debian 12 (Whonix 17 none Qubes) with Gnome Keyring.

• install Gajim 1.9.3 and Gajim PGP Plugin 1.6 via Flatpak:

flatpak remote-add --if-not-exists flathub https://flathub.org/repo/flathub.flatpakrepo
flatpak install --user https://flathub.org/repo/appstream/org.gajim.Gajim.flatpakref
flatpak install --user flathub org.gajim.Gajim.Plugin.pgp

• import my private GPG key to GPA
• add my key to my jabber account in Gajim PGP Plugin
• restart Gajim.

Correct action: system must ask the passphrase of PGP key after this.

Real action: system does not ask the passphrase of PGP key. It's impossible to receive the PGP messages from my contacts. Here is logs with "server_version_mismatch 0 server 'gpg-agent' is older than us (2.2.40 < 2.4.5)", "FAILURE: sign 83886166" and "gpg returned a non-zero error code: 2":

flatpak run org.gajim.Gajim              
(gajim:2): dbind-WARNING **: 13:30:07.842: AT-SPI: Error retrieving accessibility bus address: org.freedesktop.DBus.Error.ServiceUnknown: org.freedesktop.DBus.Error.ServiceUnknown
** (gajim:2): WARNING **: 13:30:08.504: expected enumeration type void, but got PyGLibOptionArg instead
2024-08-26T12:30:08 (W) gajim.p.manager            Unable to load manifest: Not a plugin path: /app/plugins/site-packages
2024-08-26T12:30:08 (E) gajim.c.dbus.system_style  Couldn’t read the color-scheme setting: GDBus.Error:org.freedesktop.DBus.Error.NameHasNoOwner: Name "org.freedesktop.portal.Desktop" does not exist
2024-08-26T12:30:29 (W) gnupg                      potential problem: WARNING: server_version_mismatch 0 server 'gpg-agent' is older than us (2.2.40 < 2.4.5)
2024-08-26T12:30:29 (W) gnupg                      potential problem: FAILURE: sign 83886166
2024-08-26T12:30:29 (W) gnupg                      gpg returned a non-zero error code: 2
2024-08-26T12:30:29 (W) gajim.p.pgplegacy          (jabber.org) Sign Error: None
2024-08-26T12:30:31 (W) gajim.c.m.bookmarks        (jabber.org) Error from abc@jabber.org: item-not-found - Node not found

I tried to check the issue without Flatpak. I installed Gajim 1.7.3 and Gajim PGP Plugin 1.5.1 on the same Debian 12 (Whonix 17):

sudo apt-get install gajim

I added my keys in Gajim PGP Plugin 1.5.1, restarted Gajim 1.7.3 and system asked the passphrase of key. Everything is well.

How to use PGP on Gajim (Flatpak) with Gnome Keyring?

changed the description

mentioned in issue #623 (closed)

@andre , @lovetox please check #637. Gajim PGP encryption is not working for a long time (with gnome keyring).

The issue might be caused by running different versions of gpg-agent, although it is only labelled WARNING.

WARNING: server_version_mismatch 0 server 'gpg-agent' is older than us (2.2.40 < 2.4.5)
(The host is running gpg-agent 2.2.40 and flatpak uses gpg-agent 2.4.5. (provided by the runtime))

I'm afraid I don't see much options here:

• It might be difficult but you could try updating your system's gpg-agent from 2.2.40 to 2.4.5.

or

• you could build the gajim flatpak locally with runtime version 45.

I also tried flatpak run --runtime-version=45 org.gajim.Gajim (after installing the specific runtime version), but that fails to run because python-packaging is missing. (We removed it from the flatpak manifest as it is provided by runtime version 46 now.)

Really hard to debug stuff with flatpak, we fixed the openpgp plugin now so it creates again keys, maybe you can use that one?

added Flatpak PGP (XEP-0027 - Legacy) labels