Skip to content

Not encrypting to additional users #653

Open
@WIcheese

Description

@WIcheese

Describe the bug
Adding additional users to a subfolder does not work. The .gpg-id file gets created with the proper key thumbprints, the re-encrypt process appears to happen (I have to touch my YubiKey once per entry in the folder), but neither existing nor new entries are ever accessible with the additional key. Everything is still only encrypted to the parent folder.

To Reproduce
Steps to reproduce the behavior:

  1. Start with an existing pass store, encrypted to one user key. Let's call it Key 1.
  2. Generate a keypair, Key2, in Kleopatra and make sure it works to encrypt and decrypt data everywhere but QtPass
  3. Create a subfolder, lets call it TestFolder, within the existing password store
  4. Create some entries in TestFolder
  5. Right click TestFolder in QtPass and click Users
  6. Key1 is already checked. Check Key2 and close.
  7. If any entries already exist, it will make you unlock Key1 with its passphrase. If Key1 is on a YubiKey with a touch policy you'll have to touch the YubiKey once per each entry that exists in TestFolder. So it seems to be re-encrypting everything
  8. Check the .gpg-id in TestFolder, Key1 and Key2 are both there
  9. Try to open one of the entries, it will only allow you to decrypt it with Key1.
  10. Create a new entry in TestFolder
  11. Even the new entry is only able to be decrypted with Key1
  12. Right click TestFolder and go to users - you'll see it doesn't even show Key2 checked

Expected behavior
QtPass should encrypt to the user keys that were selected for that folder, not the root folder of the password store.

Desktop (please complete the following information):

  • Windows 11 Pro with gpg4win

Additional context
The issue completely breaks varying user access to different folders. It is present on the new draft 1.4.0 as well as the stable 1.3.2

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions