bug#24718: 25.1; (auth-source-search) fails in 25.1.1 for OSX

bug#24718: 25.1; (auth-source-search) fails in 25.1.1 for OSX

[Alexey Veretennikov]

[-- Attachment #1.1: Type: text/plain, Size: 3061 bytes --]

Emacs for OSX installed from http://emacsformacosx.com/

Perform in *scratch* buffer
(require 'auth-source)
auth-source
(auth-source-search)
<= here the error Debugger entered--Lisp error: (epg-error "no usable
configuration" OpenPGP) occurs
See screenshot attached.


In GNU Emacs 25.1.1 (x86_64-apple-darwin13.4.0, NS appkit-1265.21 Version
10.9.5 (Build 13F1911))
 of 2016-09-21 built on builder10-9.porkrind.org
Windowing system distributor 'Apple', version 10.3.1348
Configured using:
 'configure --with-ns '--enable-locallisppath=/Library/Application
 Support/Emacs/${version}/site-lisp:/Library/Application
 Support/Emacs/site-lisp' --with-modules'

Configured features:
NOTIFY ACL GNUTLS LIBXML2 ZLIB TOOLKIT_SCROLL_BARS NS MODULES

Important settings:
  value of $LC_ALL: en_US.UTF-8
  value of $LC_CTYPE: en_US.UTF-8
  value of $LANG: en_US.UTF-8
  locale-coding-system: utf-8-unix

Major mode: Lisp Interaction

Minor modes in effect:
  tooltip-mode: t
  global-eldoc-mode: t
  electric-indent-mode: t
  mouse-wheel-mode: t
  tool-bar-mode: t
  menu-bar-mode: t
  file-name-shadow-mode: t
  global-font-lock-mode: t
  font-lock-mode: t
  blink-cursor-mode: t
  auto-composition-mode: t
  auto-encryption-mode: t
  auto-compression-mode: t
  line-number-mode: t
  transient-mark-mode: t

Recent messages:
For information about GNU Emacs and the GNU system, type C-h C-a.
Mark set [3 times]
Entering debugger...
Back to top level
Entering debugger...
Back to top level

Load-path shadows:
None found.

Features:
(shadow sort mail-extr emacsbug message dired format-spec rfc822 mml
mml-sec mm-decode mm-bodies mm-encode mail-parse rfc2231 mailabbrev
gmm-utils mailheader sendmail rfc2047 rfc2045 ietf-drums mail-utils
debug epa-file epa derived epg epg-config auth-source cl-seq eieio
byte-opt bytecomp byte-compile cl-extra cconv eieio-core cl-macs gv
gnus-util mm-util help-fns help-mode easymenu cl-loaddefs pcase cl-lib
mail-prsvr password-cache time-date mule-util tooltip eldoc electric
uniquify ediff-hook vc-hooks lisp-float-type mwheel ns-win ucs-normalize
term/common-win tool-bar dnd fontset image regexp-opt fringe
tabulated-list newcomment elisp-mode lisp-mode prog-mode register page
menu-bar rfn-eshadow timer select scroll-bar mouse jit-lock font-lock
syntax facemenu font-core frame cl-generic cham georgian utf-8-lang
misc-lang vietnamese tibetan thai tai-viet lao korean japanese eucjp-ms
cp51932 hebrew greek romanian slovak czech european ethiopic indian
cyrillic chinese charscript case-table epa-hook jka-cmpr-hook help
simple abbrev minibuffer cl-preloaded nadvice loaddefs button faces
cus-face macroexp files text-properties overlay sha1 md5 base64 format
env code-pages mule custom widget hashtable-print-readable backquote
kqueue cocoa ns multi-tty make-network-process emacs)

Memory information:
((conses 16 207448 9793)
 (symbols 48 20737 0)
 (miscs 40 67 274)
 (strings 32 18928 6120)
 (string-bytes 1 559076)
 (vectors 16 34879)
 (vector-slots 8 680487 6341)
 (floats 8 195 182)
 (intervals 56 286 0)
 (buffers 976 18))

[-- Attachment #1.2: Type: text/html, Size: 3529 bytes --]

[-- Attachment #2: Screen Shot 2016-10-17 at 20.23.56.png --]
[-- Type: image/png, Size: 329033 bytes --]

bug#24718: 25.1; (auth-source-search) fails in 25.1.1 for OSX

[Ted Zlatanov]

On Mon, 17 Oct 2016 20:30:25 +0200 Alexey Veretennikov <alexey.veretennikov@gmail.com> wrote: 

AV> Emacs for OSX installed from http://emacsformacosx.com/
AV> Perform in *scratch* buffer
AV> (require 'auth-source)
AV> auth-source
AV> (auth-source-search)
AV> <= here the error Debugger entered--Lisp error: (epg-error "no usable
AV> configuration" OpenPGP) occurs
AV> See screenshot attached.

I don't have access to that platform, but there are two easy things you
can do to help us locate the problem:

1) open any .gpg file directly. Does that fail with the same message?

2) set auth-sources to ~/.authinfo and put some lines in that file. Does
that work?

If (1) fails and (2) works, the problem is in EPA/EPG or its
configuration, and not auth-source. You can use (2) as a workaround
until this issue is resolved.

Thanks
Ted

bug#24718: emacs25.1 + gnus, opening message gives: epg-error "no usable configuration" CMS

[Gijs Hillenius]

Ted asked me to follow up here, so reposting and edited version of my
question on gnu.emacs.help.


I just started using Debian Emacs 25.1 + Gnus to get to my email. There
is one message that gives an epg-error that I've not seen before, and
eh, it seems neither has Google (except for pointing me to the source
code)..

Following the error, the message is displayed as raw. The message is
displayed normally under Gnus in emacs24: there the message warns:
[[S/MIME Signed Part:Failed]]

The error suggests that I need to change/add settings to my Emacs init.el or
.gnus file? But what?

It Looks like a misconfiguration or bug for handling Apple Mail s/mime
multipart messages

From my .gnus, s/mime relate settings:

       mm-verify-option 'always
       mm-decrypt-option 'always
       gnus-buttonized-mime-types
       '("multipart/alternative"
         "multipart/encrypted"
         "mul2tipart/signed")


Here is the Backtrace. 

Debugger entered--Lisp error: (epg-error "no usable configuration" CMS)
  signal(epg-error ("no usable configuration" CMS))
  epg-context--make(CMS nil nil nil nil nil nil)
  epg-make-context(CMS)
  mml-smime-epg-verify(((#("multipart/alternative" 0 21 (boundary
"Apple-Mail=athirdrandomnumber" buffer #<buffer *mm*-284343> from
"name@invalid" start nil)) (#<buffer *mm*-592458> ("text/plain"
(charset . "utf-8")) quoted-printable nil ("inline") nil nil nil)
(#("multipart/mixed" 0 15 (boundary "Apple-Mail=_somerandomnumberB"
buffer #<buffer *mm*-435762> from "name@invalid" start nil)) (#<buffer
*mm*-694220> ("text/html" (charset . "utf-8")) quoted-printable nil
nil nil nil nil) (#<buffer *mm*-880244>
("application/vnd.oasis.opendocument.text" (name . "attachmentname")
(x-unix-mode . "0644")) base64 nil ("attachment" (filename
. "attachmentname")) nil nil nil) (#<buffer *mm*-624164> ("text/html"
(charset . "us-ascii")) 7bit nil nil nil nil nil))) (#<buffer
*mm*-696004> ("application/pkcs7-signature" (name . "smime.p7s"))
base64 nil ("attachment" (filename . "smime.p7s")) nil nil nil))
(#("multipart/signed" 0 16 (micalg "sha1" protocol
"application/pkcs7-signature" boundary
"Apple-Mail=anotherrandomnumber" buffer #<buffer *mm*-412231> from
"name@invalid" start nil)) (micalg . "sha1") (protocol
. "application/pkcs7-signature") (boundary
. "Apple-Mail=anotherrandomnumber")))
  mml-smime-verify(((#("multipart/alternative" 0 21 (boundary
"Apple-Mail=athirdrandomnumber" buffer #<buffer *mm*-284343> from
"name@invalid" start nil)) (#<buffer *mm*-592458> ("text/plain"
(charset . "utf-8")) quoted-printable nil ("inline") nil nil nil)
(#("multipart/mixed" 0 15 (boundary "Apple-Mail=_somerandomnumberB"
buffer #<buffer *mm*-435762> from "name@invalid" start nil)) (#<buffer
*mm*-694220> ("text/html" (charset . "utf-8")) quoted-printable nil
nil nil nil nil) (#<buffer *mm*-880244>
("application/vnd.oasis.opendocument.text" (name . "attachmentname")
(x-unix-mode . "0644")) base64 nil ("attachment" (filename
. "attachmentname")) nil nil nil) (#<buffer *mm*-624164> ("text/html"
(charset . "us-ascii")) 7bit nil nil nil nil nil))) (#<buffer
*mm*-696004> ("application/pkcs7-signature" (name . "smime.p7s"))
base64 nil ("attachment" (filename . "smime.p7s")) nil nil nil))
(#("multipart/signed" 0 16 (micalg "sha1" protocol
"application/pkcs7-signature" boundary
"Apple-Mail=anotherrandomnumber" buffer #<buffer *mm*-412231> from
"name@invalid" start nil)) (micalg . "sha1") (protocol
. "application/pkcs7-signature") (boundary
. "Apple-Mail=anotherrandomnumber")))
  mm-possibly-verify-or-decrypt(((#("multipart/alternative" 0 21
(boundary "Apple-Mail=athirdrandomnumber" buffer #<buffer *mm*-284343>
from "name@invalid" start nil)) (#<buffer *mm*-592458> ("text/plain"
(charset . "utf-8")) quoted-printable nil ("inline") nil nil nil)
(#("multipart/mixed" 0 15 (boundary "Apple-Mail=_somerandomnumberB"
buffer #<buffer *mm*-435762> from "name@invalid" start nil)) (#<buffer
*mm*-694220> ("text/html" (charset . "utf-8")) quoted-printable nil
nil nil nil nil) (#<buffer *mm*-880244>
("application/vnd.oasis.opendocument.text" (name . "attachmentname")
(x-unix-mode . "0644")) base64 nil ("attachment" (filename
. "attachmentname")) nil nil nil) (#<buffer *mm*-624164> ("text/html"
(charset . "us-ascii")) 7bit nil nil nil nil nil))) (#<buffer
*mm*-696004> ("application/pkcs7-signature" (name . "smime.p7s"))
base64 nil ("attachment" (filename . "smime.p7s")) nil nil nil))
(#("multipart/signed" 0 16 (micalg "sha1" protocol
"application/pkcs7-signature" boundary
"Apple-Mail=anotherrandomnumber" buffer #<buffer *mm*-412231> from
"name@invalid" start nil)) (micalg . "sha1") (protocol
. "application/pkcs7-signature") (boundary
. "Apple-Mail=anotherrandomnumber")) "name@invalid")
  mm-dissect-multipart((#("multipart/signed" 0 16 (micalg "sha1"
protocol "application/pkcs7-signature" boundary
"Apple-Mail=anotherrandomnumber" buffer #<buffer *mm*-412231> from
"name@invalid" start nil)) (micalg . "sha1") (protocol
. "application/pkcs7-signature") (boundary
. "Apple-Mail=anotherrandomnumber")) "name@invalid")
  mm-dissect-buffer(nil t)
  gnus-display-mime()
  gnus-article-prepare-display()
  gnus-article-prepare(1242 nil)
  gnus-summary-display-article(1242 nil)
  gnus-summary-select-article(nil nil pseudo)
  gnus-summary-scroll-up(1)
  funcall-interactively(gnus-summary-scroll-up 1)
  call-interactively(gnus-summary-scroll-up nil nil)
  command-execute(gnus-summary-scroll-up)
  

bug#24718: 25.1; (auth-source-search) fails in 25.1.1 for OSX

[Alexey Veretennikov]

Hi,

I've found rather strange solution/workaround.
I've used gpg version 2.0.xx, which worked for me for 25.0.50 I believe.
But for 25.1 I had to upgrade gpg to 2.1.15. Now everything seems to work.

Ted Zlatanov <tzz@lifelogs.com> writes:

> On Mon, 17 Oct 2016 20:30:25 +0200 Alexey Veretennikov
> <alexey.veretennikov@gmail.com> wrote:
>
> AV> Emacs for OSX installed from http://emacsformacosx.com/
> AV> Perform in *scratch* buffer
> AV> (require 'auth-source)
> AV> auth-source
> AV> (auth-source-search)
> AV> <= here the error Debugger entered--Lisp error: (epg-error "no usable
> AV> configuration" OpenPGP) occurs
> AV> See screenshot attached.
>
> I don't have access to that platform, but there are two easy things you
> can do to help us locate the problem:
>
> 1) open any .gpg file directly. Does that fail with the same message?
>
> 2) set auth-sources to ~/.authinfo and put some lines in that file. Does
> that work?
>
> If (1) fails and (2) works, the problem is in EPA/EPG or its
> configuration, and not auth-source. You can use (2) as a workaround
> until this issue is resolved.
>
> Thanks
> Ted

-- 
Br,
/Alexey

bug#24718: emacs25.1 + gnus, opening message gives: epg-error "no usable configuration" CMS, bug#24718: 25.1; (auth-source-search) fails in 25.1.1 for OSX

[Ted Zlatanov]

On Tue, 18 Oct 2016 15:59:05 +0200 Gijs Hillenius <gijs@hillenius.net> wrote: 

GH> Ted asked me to follow up here, so reposting and edited version of my
GH> question on gnu.emacs.help.

Hi Gijs, can you try Alexey's workaround? Also note my two suggestions
at the bottom, if the workaround doesn't do it.

Alexey reported this for Mac OS but it seems like it may affect multiple
platforms, since you said that you were on Debian.

Thanks
Ted

On Wed, 19 Oct 2016 00:14:50 +0200 Alexey Veretennikov <alexey.veretennikov@gmail.com> wrote: 

AV> I've found rather strange solution/workaround.
AV> I've used gpg version 2.0.xx, which worked for me for 25.0.50 I believe.
AV> But for 25.1 I had to upgrade gpg to 2.1.15. Now everything seems to work.

AV> Ted Zlatanov <tzz@lifelogs.com> writes:

>> there are two easy things you can do to help us locate the problem:
>> 
>> 1) open any .gpg file directly. Does that fail with the same message?
>> 
>> 2) set auth-sources to ~/.authinfo and put some lines in that file. Does
>> that work?
>> 
>> If (1) fails and (2) works, the problem is in EPA/EPG or its
>> configuration, and not auth-source. You can use (2) as a workaround
>> until this issue is resolved.

bug#24718: emacs25.1 + gnus, opening message gives: epg-error "no usable configuration" CMS, bug#24718: 25.1; (auth-source-search) fails in 25.1.1 for OSX

[Gijs Hillenius]

On 19 Oct 2016, Ted Zlatanov wrote:

> Hi Gijs, can you try Alexey's workaround? Also note my two suggestions
> at the bottom, if the workaround doesn't do it.
>
> Alexey reported this for Mac OS but it seems like it may affect
> multiple platforms, since you said that you were on Debian.
>
> Thanks
> Ted
>
> On Wed, 19 Oct 2016 00:14:50 +0200 Alexey Veretennikov <alexey.veretennikov@gmail.com> wrote:
>
> AV> I've found rather strange solution/workaround.  I've used gpg
> AV> version 2.0.xx, which worked for me for 25.0.50 I believe.  But
> AV> for 25.1 I had to upgrade gpg to 2.1.15. Now everything seems to
> AV> work.
>
> AV> Ted Zlatanov <tzz@lifelogs.com> writes:
>
>>> there are two easy things you can do to help us locate the problem:
>>>
>>> 1) open any .gpg file directly. Does that fail with the same
>>> message?
>>>
>>> 2) set auth-sources to ~/.authinfo and put some lines in that
>>> file. Does that work?
>>>
>>> If (1) fails and (2) works, the problem is in EPA/EPG or its
>>> configuration, and not auth-source. You can use (2) as a workaround
>>> until this issue is resolved.

I'm already on (Debian's) GPGv 2.1.15-4, and I can open .gpg files fine,
such as authinfo.gpg. I can also decrypt gpg buffers
(epa-decrypt-region) fine.

So far, I only get this error "epg-error "no usable configuration" CMS"
when opening an email message by somebody using an Apple to send me an
S/MIME message. In Emacs24, using Gnus, this gives the normal message
headers followed by

[[S/MIME Signed Part:Failed]]
1.  ( ) text/plain          (*) text/html  

in Emacs25, the same message is displayed as raw.

Perhaps it is not at all related to the OP's issue. 

bug#24718: emacs25.1 + gnus, opening message gives: epg-error "no usable configuration" CMS, bug#24718: 25.1; (auth-source-search) fails in 25.1.1 for OSX

[Ted Zlatanov]

On Wed, 19 Oct 2016 15:50:51 +0200 Gijs Hillenius <gijs@hillenius.net> wrote: 

GH> I'm already on (Debian's) GPGv 2.1.15-4, and I can open .gpg files fine,
GH> such as authinfo.gpg. I can also decrypt gpg buffers
GH> (epa-decrypt-region) fine.

GH> So far, I only get this error "epg-error "no usable configuration" CMS"
GH> when opening an email message by somebody using an Apple to send me an
GH> S/MIME message. In Emacs24, using Gnus, this gives the normal message
GH> headers followed by

GH> [[S/MIME Signed Part:Failed]]
GH> 1.  ( ) text/plain          (*) text/html  

GH> in Emacs25, the same message is displayed as raw.

GH> Perhaps it is not at all related to the OP's issue. 

I see, thank you for clarifying. The error message was the same so I
hoped it was related. I'll wait for the EPA/EPG maintainer, Daiki Ueno,
to comment since I don't know the internals well enough to be more
helpful.

Thanks
Ted

bug#24718: emacs25.1 + gnus, opening message gives: epg-error "no usable configuration" CMS, bug#24718: 25.1; (auth-source-search) fails in 25.1.1 for OSX

[Daiki Ueno]

> GH> So far, I only get this error "epg-error "no usable configuration" CMS"

What is this evaluated to?

  M-: (epg-find-configuration 'CMS)

On my environment, it's is:

  ((program . "/usr/bin/gpgsm") (version . "2.1.13"))

bug#24718: emacs25.1 + gnus, opening message gives: epg-error "no usable configuration" CMS, bug#24718: 25.1; (auth-source-search) fails in 25.1.1 for OSX

[Gijs Hillenius]

On 19 Oct 2016, Daiki Ueno wrote:

>> GH> So far, I only get this error "epg-error "no usable
>> GH> configuration" CMS"
>
> What is this evaluated to?
>
> M-: (epg-find-configuration 'CMS)

over here that evaluates to nil

> On my environment, it's is:
>
> ((program . "/usr/bin/gpgsm") (version . "2.1.13"))

Well, that explains something :-) I did not before have this gpgsm
installed. Now I have, but oddly, now gnus takes forever to open the
message.

bug#24718: emacs25.1 + gnus, opening message gives: epg-error "no usable configuration" CMS, bug#24718: 25.1; (auth-source-search) fails in 25.1.1 for OSX

[Daiki Ueno]

> Well, that explains something :-) I did not before have this gpgsm
> installed. Now I have, but oddly, now gnus takes forever to open the
> message.

S/MIME signature verification with gpgsm could take some time.  If it
takes really too long, a usual suggestion is to gather debug output with
(setq epg-debug t).

bug#24718: emacs25.1 + gnus, opening message gives: epg-error "no usable configuration" CMS, bug#24718: 25.1; (auth-source-search) fails in 25.1.1 for OSX

[Gijs Hillenius]

So I installed gpgsm (Debian Sid's 2.1.15-4).

Without configuring anything gpgsm-related, this gives two kinds of
results:

I have a bunch of email messages, all from the same sender, that come
with s/mime. For these emails, Gnus now takes forever, or /sometimes/ it
pops up a question:

Do you ultimately trust
"CN=AddTrust External CA Root
 OU=AddTrust External TTP Network
 O=AddTrust AB
 C=SE"
to correctly certify user certificates?
[cancel][yes]


If I hit yes, there is a second question, which I have not captured
yet. If I hit cancel - either at the second question, or on the first -
Emacs + Gnus seem to continue to wait forever. When I C-g, the message
is displayed as raw.

I don't yet know why this question, or these questions, is or are
displayed just sometimes, not everytime.

I notice that when trying to open one of these s/mime messages, gpgsm is
trying to verify things: 

/usr/bin/gpgsm --no-tty --status-fd 1 --yes --output /tmp/epg-output314864Xn --verify -- /tmp/epg-signature31486Fit -

/tmp/epg-signature31486Fit looks like the AddTrust certificate,
/tmp/epg-output314864Xn is empty

bug#24718: emacs25.1 + gnus, opening message gives: epg-error "no usable configuration" CMS, bug#24718: 25.1; (auth-source-search) fails in 25.1.1 for OSX

[Gijs Hillenius]

On 20 Oct 2016, Daiki Ueno wrote:

>> Well, that explains something :-) I did not before have this gpgsm
>> installed. Now I have, but oddly, now gnus takes forever to open the
>> message.
>
> S/MIME signature verification with gpgsm could take some time.  If it
> takes really too long, a usual suggestion is to gather debug output
> with (setq epg-debug t).

it takes many minutes.. and I give up waiting, so press C-g

But now, oddly enough, when I open an earlier s/mime message, it is
displayed immediately, and it now shows: 

[[S/MIME Signed Part:Failed]]

which is the behaviour in Emacs24 (without gpgsm).


-- 
I have more hit points that you can possible imagine.

bug#24718: emacs25.1 + gnus, opening message gives: epg-error "no usable configuration" CMS, bug#24718: 25.1; (auth-source-search) fails in 25.1.1 for OSX

[Andreas Schwab]

On Okt 20 2016, Gijs Hillenius <gijs@hillenius.net> wrote:

> On 20 Oct 2016, Daiki Ueno wrote:
>
>>> Well, that explains something :-) I did not before have this gpgsm
>>> installed. Now I have, but oddly, now gnus takes forever to open the
>>> message.
>>
>> S/MIME signature verification with gpgsm could take some time.  If it
>> takes really too long, a usual suggestion is to gather debug output
>> with (setq epg-debug t).
>
> it takes many minutes.. and I give up waiting, so press C-g

Perhaps it needs to download the CRL, which can take a long time.  Watch
the directory ~/.gnupg/dirmngr-cache.d while it hangs.

Andreas.

-- 
Andreas Schwab, SUSE Labs, schwab@suse.de
GPG Key fingerprint = 0196 BAD8 1CE9 1970 F4BE  1748 E4D4 88E3 0EEA B9D7
"And now for something completely different."

bug#24718: gpgsm takes (too) long (was: bug#24718: emacs25.1 + gnus, opening message gives: epg-error "no usable configuration" CMS, bug#24718: 25.1; (auth-source-search) fails in 25.1.1 for OSX)

[Gijs Hillenius]

On 20 Oct 2016, Andreas Schwab wrote:

> On Okt 20 2016, Gijs Hillenius <gijs@hillenius.net> wrote:
>
>> On 20 Oct 2016, Daiki Ueno wrote:
>>
>>>> Well, that explains something :-) I did not before have this gpgsm
>>>> installed. Now I have, but oddly, now gnus takes forever to open
>>>> the message.
>>>
>>> S/MIME signature verification with gpgsm could take some time.  If
>>> it takes really too long, a usual suggestion is to gather debug
>>> output with (setq epg-debug t).
>>
>> it takes many minutes.. and I give up waiting, so press C-g
>
> Perhaps it needs to download the CRL, which can take a long time.
> Watch the directory ~/.gnupg/dirmngr-cache.d while it hangs.

Thanks!

On Debian, that dir seems to be called ~/.gnupg/crls.d/

Tried opening one of these messages again: and yesterday gave it more
than 30 minutes before I gave up.  ~/.gnupg/crls.d/ now contains a file
(very-long-number.db).

I go to the next s/mime message, and get that question about ultimate
trust again. I say no, and Gnus displays the message with a (valid)
signature, that is unverified (by me). I did not catch the exact output,
sorry.

This happens only once. The next message, from the same sender, this
waiting (verifying) starts again. Even though now there is a file in
~/.gnupg/crls.d/ ?

Is there a way in which I can disable this checking altogether?
Additionally: if no gpgsm is available on the host, perhaps the result
should or could be made similar to what it does in Emacs24, simply
display the message without verification?

bug#24718: emacs25.1 + gnus, opening message gives: epg-error "no usable configuration" CMS, bug#24718: 25.1; (auth-source-search) fails in 25.1.1 for OSX

[Gijs Hillenius]

I'm still trying to figure out what I'm missing re the Gpgs (bug#24718).

First: if I don't have gpgsm installed, it should just fail, and let
Gnus display the message normally, right?

Second: this might give you an idea:

I notice that for the s/mime messages that seem to cause Gnus & Emacs to
wait forever (over 1 hour yesterday) ps aux shows:

/usr/bin/gpgsm --no-tty --status-fd 1 --yes --output
/tmp/epg-output25808sln --verify -- /tmp/epg-signature258085vt -

If I kill that process, Gnus immediately displays the message normally,
printing:

,----
| [[S/MIME Signed Part:]]
| 1.  ( ) text/plain          (*) text/html      
`----

This is (I think) the same as under Emacs24.


If, while waiting for Emacs Gnus to do its s/mime magic, I can repeat
the gpgsm command I find with ps aux, without the trailing - like so:

,----
| /usr/bin/gpgsm --no-tty --status-fd 1 --yes --output
| /tmp/epg-output25808sln --verify -- /tmp/epg-signature258085vt 
`----

the output is

gpgsm: detached signature w/o data - assuming certs-only
[GNUPG:] NEWSIG
gpgsm: Signature made 2016-10-18 08:56:29 using certificate ID 0x7E75F4FD
gpgsm: invalid signature: message digest attribute does not match computed one
[GNUPG:] BADSIG AC9F7F57E4DF8B867676D82AG4FDACF67E5644FQ /EMail=charles@hisdomain

if I repeat it *with* the trailing -

gpgsm: option --output ignored for a detached signature

it waits for something.. until I ^c it

Does this make some kind of sense?

bug#24718: Fixed: Re: bug#24718: emacs25.1 + gnus, opening message gives: epg-error "no usable configuration" CMS, bug#24718: 25.1; (auth-source-search) fails in 25.1.1 for OSX

[Gijs Hillenius]

My issue is/was caused by Debian bug #840680. I've just upgraded to
Debian's 2.1.15-6 of dirmgnr and now the time-outs are gone, and the
s/mime certificates get installed instantly in ~/.gnupg/crls.d