Re: BUG #7923: PGP secret key with password decryption not working

On Wed, Mar 6, 2013 at 11:31:25PM +0000, keith(at)omniti(dot)com wrote:
> The following bug has been logged on the website:
>
> Bug reference: 7923
> Logged by: Keith Fiske
> Email address: keith(at)omniti(dot)com
> PostgreSQL version: 9.2.3
> Operating system: Debian/Ubuntu/Solaris
> Description:
>
> Running into an issue when we tried to add a password to a gpg secret key
> used to encrypt data in the database. Things have been working fine with no
> password on they key, but that isn't ideal. I was able to recreate this
> issue on my local install of postgres, so it's not just an issue on the
> server where I first noticed it. Below is the process I went through,
> generating a key, moving it to where postgres can read it, encrypting and
> then attempting to decrypt the data. I know the password I gave is correct
> because I used the same password to remove it from the key and then things
> just worked.
>
> Ran into someone else reporting pretty much the same issue but no resolution
> other than removing the password.
> http://bytes.com/topic/postgresql/answers/943536-corrupt-data-error-decryption-postgresql-using-gnupg

FYI, I believe this was fixed here:

commit 477b5a0e24f3b62a470f9684e22e36a2c7735274
Author: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
Date: Fri May 10 13:06:48 2013 -0400

Fix pgp_pub_decrypt() so it works for secret keys with passwords.

Per report from Keith Fiske.

Marko Kreen

Here are the details:

http://www.postgresql.org/message-id/20130506193940.GA3078@gmail.com

The fix is included in all releases done on Oct. 10, 2013.

--
Bruce Momjian <bruce(at)momjian(dot)us> http://momjian.us
EnterpriseDB http://enterprisedb.com

+ Everyone has their own god. +