Dear Maintainer,

The duplicate uuids do not appear to affect the operation of
password-gorilla itself, but may affect the working of utilities
on other platforms that use the same password store file format
and provide the same functionality.

I encountered the problem after copying a password database generated by
password-gorilla to an android smartphone and used it with the PasswdSafe
app. Duplicate uids in the file resulted in the android app displaying
incorrect information for some entries and copying incorrect information
to the clipboard.

Problem is known and is fixed in a later version of password-gorilla.
Using later version of password-gorilla corrects uuid generation and
repairs password database files that are affected by the problem. I have
confirmed that using a repaired password database file for the android
PasswdSafe app produces the expected display and clipboard copy of the
information requested.

password-gorilla version 1.6.0~git20180203.228bbbb-1 aka 1.6.0 beta1
is now quite old, a more recent "1.6.0 beta-2" version is available.

Request that this newer version is packaged into the next Debian release.

Background

password-gorilla is an implementation of the functionality of the
Password Safe utility originally implemented on Windows; the functionality
has been implemented for other platforms including the PasswdSafe
app on Android. (The current version of the Windows utility (3.65.0)
recognises and repairs duplicated uuids.)

For android PasswdSafe discussion of the problem, see
https://sourceforge.net/p/passwdsafe/discussion/1067588/
(PasswdSafe on SourceForge ... Discussion ... Help ... "problem with psafe3
file from password gorilla".)

For password-gorilla description of problem and correction see
https://github.com/zdia/gorilla/issues/203

Problem is fixed in password gorilla 1.6.0 beta-2 which can be downloaded
as a system-independent "kit" file from
https://gorilla.dp100.com/downloads/
It can be run using the appropriate tclkit executable from
https://gorilla.dp100.com/downloads/tclkit/
and this is the method I used to confirm that the problem as I encountered
it is fixed in version 1.6.0 beta-2.
I imagine that the same procedure that was used to package the beta1 version
for Debian distribution will also work for beta-2.

Regards
Peter Lee (bellman@snarkjaeger.ch)

Hi,

Thanks for taking the time to open a bug report.

I will update the password-gorilla package to upstream v1.6.0 beta2,
synchronized with the official release
(gorilla-1.6.0-beta-2-pre160-35102bbd657706aa414a2b5f2693d13b9885eaf3).
This should include the fix for your bug report.

Best regards,
Alexandre

Le ven. 26 janv. 2024, à 05 h 33, Peter Lee <bellman@snarkjaeger.ch> a écrit :