tag:gpgtools.tenderapp.com,2011-11-04:/discussions/beta/634-secret-key-to-decrypt-the-message-is-missingGPGTools: Discussion 2016-02-24T12:29:30Ztag:gpgtools.tenderapp.com,2011-11-04:Comment/357214372015-01-15T11:14:32Z2015-01-15T11:14:32ZSecret key to decrypt the message is missing<div><p>hi Phoebe</p>
<p>Are you still facing the issue? Maybe try to install the latest
updates on your OS X (10.10.1) is the latest one</p></div>wingmantag:gpgtools.tenderapp.com,2011-11-04:Comment/357214372015-02-06T01:40:46Z2015-02-06T01:40:46ZSecret key to decrypt the message is missing<div><p>Hi Phoebe,</p>
<p>please update to OSX 10.10.2. Then could you please download and
install our latest <a href=
"https://releases.gpgtools.org/nightlies/">nightly build</a> and
see if the problem persists. That page also has sig and SHA1 to
verify the download.</p>
<p>If the problem still persists after that, open GPG Keychain and
look how many entries with "sec/pub" in the type column you
see.</p>
<p>All the best, steve</p>
<p>Disclaimer: This is a development version which has not been
thoroughly tested yet - bugs or crashes are to be expected. Thanks
for helping us test.</p></div>Stevetag:gpgtools.tenderapp.com,2011-11-04:Comment/357214372015-02-11T20:53:29Z2015-02-11T20:53:29ZSecret key to decrypt the message is missing<div><p>Hi Steve,</p>
<p>It still not working :(</p>
<p>There is only one sec/pub on the keychain. But, I have 2 keys
for the same email. Is this normal?</p>
<p>I messed up the keychain back then, but able to restore the key
back and had Mail back to work. So 2 keys on the keychains has been
fine and working well until upgraded to Yosemite and beta gpg, then
start showing the message “secret key to decrypt the message
is missing”.</p>
<p>any other suggestions to fix this?</p>
<p>Many thanks,<br>
Phoebe</p></div>Phoebe Lamtag:gpgtools.tenderapp.com,2011-11-04:Comment/357214372015-02-13T15:51:35Z2015-02-13T15:51:35ZSecret key to decrypt the message is missing<div><p>Hi Phoebe,</p>
<p>here's my theory of what happened: you created 2 keys initially
for the same address. One secret key got lost meanwhile and you now
only have one sec/pub key. When searching the key servers for
<code>phoebe@borealiscentre.org</code> I only find a single key. So
that is good news, because the new key from may 2014 key does not
seem to have been uploaded to the key servers.</p>
<p>Master plan to get your setup fixed:</p>
<ol>
<li>
<p>Revoke the 2014 May key<br>
It seems you lost the sec key So that key is of no real use to you.
I suggest revoking that key. The easiest way is, to right click on
that pub key and see if you have an option to "revoke". If that
option is greyed out, things get a little more complicated. In that
case you do not have a revoke cert available. But let's first check
if the easy solution works out.</p>
</li>
<li>
<p>Test mail<br>
I've sent you a test mail. Are you able to decrypt that
message?</p>
</li>
</ol>
<p>We'll go from there,<br>
steve</p></div>Stevetag:gpgtools.tenderapp.com,2011-11-04:Comment/357214372015-02-13T18:07:59Z2015-02-13T18:08:00ZSecret key to decrypt the message is missing<div><p>Hi Steve,</p>
<p>Oops, master plan A doesn’t work. The “revoke”
option is greyed out :(</p>
<p>And, yes, I can read your message. Replied separately.</p>
<p>So, what’s the master plan B?</p>
<p>Thanks,<br>
Phoebe</p></div>Phoebe Lamtag:gpgtools.tenderapp.com,2011-11-04:Comment/357214372015-02-15T14:01:46Z2015-02-15T14:01:46ZSecret key to decrypt the message is missing<div><p>Hi Phoebe,</p>
<p>in the current version of GPG Suite, we now create a revocation
certificate for each new key being created. We do this to prevent
from this exact situation: being stuck with a useless key and being
unable to revoke.</p>
<p>While this is not the end of the world, it is a bit annoying
because now you cannot revoke that key. It's not on the key servers
so the damage is not that big. I suggest, to simply remove the pub
key for your mail address. Since you have two public keys for your
own mail at the moment this might be confusing for GPGMail. Make
sure to make a backup of all your current keys first before
starting to deal with this:<br>
<a href=
"http://support.gpgtools.org/kb/gpg-keychain-faq/backup-or-transfer-your-keys">
http://support.gpgtools.org/kb/gpg-keychain-faq/backup-or-transfer-...</a></p>
<p>Once you have a backup, delete the pub key for your mail
address. Then tell teh contact sending those mail you are unable to
encrypt to remove all keys for your except the one found on the key
servers.</p>
<p>That should bring you to fully working state.</p>
<p>Please also note: we received your mail mail encrypted but not
signed.</p>
<p>Please take the time to carefully read our quickstart
tutorial (<a href=
"http://gpgtools.org/quickstart">http://gpgtools.org/quickstart</a>)
to help you understand the basics - how GPGMail works. Since
your mail was not signed, please especially have a look at that
section and why it might be worth considering to make use of that
as well.</p>
<p>Best regards, Steve</p></div>Stevetag:gpgtools.tenderapp.com,2011-11-04:Comment/357214372015-02-16T23:41:32Z2015-02-16T23:41:33ZSecret key to decrypt the message is missing<div><p>Hi Steve,</p>
<p>I think it is working, can you send me an encrypted email to
test it out?</p>
<p>Thanks,<br>
Phoebe</p></div>Phoebe Lamtag:gpgtools.tenderapp.com,2011-11-04:Comment/357214372015-02-16T23:43:19Z2015-02-16T23:43:19ZSecret key to decrypt the message is missing<div><p><em>DING</em></p>
<p>you got mail.</p></div>Stevetag:gpgtools.tenderapp.com,2011-11-04:Comment/357214372015-02-16T23:52:36Z2015-02-16T23:52:36ZSecret key to decrypt the message is missing<div><p>Hi!</p>
<p>Rec'd. I can read your message.</p></div>Phoebe Lamtag:gpgtools.tenderapp.com,2011-11-04:Comment/357214372015-02-17T00:15:40Z2015-02-17T00:15:40ZSecret key to decrypt the message is missing<div><p>\°/</p>
<p>ok, closing this. Glad, this is solved for you. I'm closing this
discussion. If you need further assistance or have questions you
can re-open this discussion here or open a new one any time.</p>
<p>Best, steve</p></div>Steve