Questions[enigmail](ubuntu)

I am part of a small NGO whose IT Admin is currently ouf of reach. All our computers have Ubuntu installed and in our everyday work we rely heavily on gpg.

Here is the problem: While some people have updated their system already, Thunderbird has updated as well, proving to have implemented a complete new way of handling pgp messages and keys. People report it is not yet running smoothely and only with huge effort is it possible to regain control over gpg again. I would like to circumvent this.

My question: is there an easy terminal command to update all packages except thunderbird? From what I know, thunderbirds 68-Version is not critical, but other packages might undergo serious threats if remaining un-updated for some time.

I would highly appreciate an easy solution that our people (and other people who got this problem as well) might adopt.

PS: Havent't found another entry dealing with this problem / solution. Sorry if I overlooked it...

It seems that the Enigmail extension was updated today in my Ubuntu desktop machine. The version is now "Enigmail 2.1.8". However, after Thunderbird starts (and a few seconds pass) Thunderbird freezes.

I had to kill Thunderbird from command line and start it in "safe mode". Then I disabled the Enigmail extension in the Add-ons Manager. After restarting Thunderbird in normal mode, I no longer experience the hang.

Any ideas from users with same configuration?

System: Ubuntu 20.04.1. Thunderbird 68.10.0. (Fully updated system brings Thunderbird only to 68.10, while there are newer releases.)

Testing GPG encrypted emails, I understand the reason for Revocation Certificate if you are making one for long time. Beings I'm trying to setup Thunderbird & Enigmail I thought I would start with keys that expires in 1wk. Once I finish testing then generate keys for longer time.

Systems: Manjaro & Ubuntu 18.04; 1wk GPG Keys created with terminal for 2 email accounts; Added my email to Thunderbird and will test to 2nd email acct. Question below.

Why create revocation certificate for key that expires in 1wk. I'm Googled out

I have recently installed the latest version of Thunderbird (60.3.0, 64-bit) on Ubuntu 18.04 from the Snap Store. I have installed the Enigmail addon and successfully imported my private key. On startup of Thunderbird a notification is displayed:

Your secret key [...] has missing trust. We recommend that you set "You rely on certifications" to ultimate in key properties.

After opening “Key Properties” I find no option to set "You rely on certifications".

After clicking “Certify” a notification is displayed:

No eligible key found for signing! You need at least one fully trusted secret key in order to sign keys.

How can I resolve this missing trust issue?

UPDATE

Following @dlakomski's advice I tried to change the trust setting on my private key (part of ~/.gnupg/pubring.kbx), but found it already to be set to 5 = I trust ultimately.

gpg> save
Key not changed so no update needed.

Enigmail has found GnuPG in /snap/thunderbird/29/usr/bin/gpg2 and “Override with /usr/bin/gpg” is not an option (probably because Thunderbird was installed as a snap):

GnuPG cannot be executed with the path provided. Enigmail is therefore deactivated until you change the path to GnuPG again or until you restart the application.

Is it possible that /snap/thunderbird/29/usr/bin/gpg2 is agnostic to trust settings of keys in ~/.gnupg/pubring.kbx?

sorry if this was already answered, but I couldn't find the right answer on my own.

I am using Enigmail in Thunderbird and created a pgp key (priv and pub) for myself in Enigmail. Now I want to sign documents created in Libre Office. My pgp key pair appears in Seahorse, but doesn't appear in Seahorse opened by Libre Office, because they are not marked as "personal" (and Libreoffice only signs documents with keys marked as personal?).

Do I have to export it from Enigmail and reimport it to Seahorse? Then I would have them two times, wouldn't I?

How can I use my pgp key created in Enigmail for signing documents in Libre Office?

Thank you for your help! :)