Skip to content

Generating a revocation certificate with Enigmail fails

Open thunderbird, open Enigmail>Key Management, select you key pair and open Generate>Revocation Certificate, choose a place to save this certificate.
Enigmail pops up the following error message :

The revocation certificate could not be created.

There is an apparmor DENIED message, I guess related to that, in the logs :

amnesia audit[8253]: AVC apparmor="DENIED" operation="mknod" profile="thunderbird//gpg" name=<Some very long hexadecimal number> pid=8253 comm="gpg2" requested_mask="c" denied_mask="c" fsuid=1000 ouid=1000

Since it is not possible to generate a revocation certificate with Seahorse, there is no other options for the user than opening a terminal and starting

gpg --generate-revocation <user-id>

Feature Branch: feature/15091-thunderbird-60

Related issues

Original created by @goupille on 15551 (Redmine)

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information