gpg is the main command line tool of the GNU Privacy Guard (GnuPG), implementing the OpenPGP standard for public key cryptography. It allows encryption, (verification of) signatures and trust models like the web of trust. gpg (and its library gpgme) are the base of many FOSS crypto applications ...

learn more… | top users | synonyms

1
vote
2answers
29 views

What happens when you verify a detached signature?

I'm trying to understand what happens when verifying a detached gpg signature. Here's an example from the gnupg manual: blake% gpg --verify doc.sig doc gpg: Signature made Fri Jun 4 12:38:46 1999 ...
3
votes
1answer
212 views

Problem with public key on apt-get update

I have Lubuntu 16.04. My problem is similar to this questiuon: sudo apt-get update Get:1 http://it.archive.ubuntu.com/ubuntu xenial InRelease [247 kB] Hit:2 ...
3
votes
1answer
15 views

How do I make GPG use keys accessed over SSH?

I have my GPG keys stored on a remote server (accessible via SSH) due to some technical constraints. Is it possible to make GPG use those keys transferred over ssh, without actually copying them ...
1
vote
1answer
21 views

Problem configuring GPG pinentry

I have two hosts, A and B. On A I have the gpg pinentry program setup to be pinentry-curses but I have no idea how I did it anymore. I can not seem to find the difference between A and B, but on A ...
1
vote
1answer
37 views

How to get pinentry-curses to start on the correct tty?

I use gpg-agent for managing both PGP e SSH identities. The agent is started with a script like this gpg_agent_env="$XDG_CACHE_HOME/gpg-agent.env" export GPG_TTY="$(tty)" if ! ps -U "$USER" -o ...
0
votes
1answer
52 views

linux mint - invalid signature BADSIG 3EE67F3D0FF405B2 for extra.linuxmint.com repository

While trying to run apt-get update on linux mint 17.3 I am getting following error. W: GPG error: http://extra.linuxmint.com rosa Release: The following signatures were invalid: BADSIG ...
2
votes
4answers
323 views

Generating QR code of very big file?

I want to generate a QR code of my 4096-bit armored GPG private key. The key is so big, the program qrencode seems to fail because of its size. $ gpg --export-secret-keys --armor > ~/private.key $ ...
1
vote
1answer
23 views

CentOS - change the password of GPG file by bash script

I am looking for a bash script which input is the old and the new password for changing password of a *.gpg file. I encrypted a txt file with command gpg -c. System create a file.txt.gpg. How can I ...
1
vote
0answers
27 views

gpg-agent problems on Manjaro Linux (KDE)

Recently Github announced support for signed commits, so I configured Git: git config --global user.signingkey F03CB372 git config --global commit.gpgsign true I already had a GPG key F03CB372, ...
2
votes
0answers
38 views

GPG Key Generation Fails on Alpine Linux Docker Image

I've performed the following test on a docker alpine linux: ole@MKI:~$ docker run --rm -it alpine /bin/ash / # apk add --update duplicity fetch ...
1
vote
1answer
44 views

How can I import a key in PEM format (not OpenPGP) into GPG?

I have data like this: -----BEGIN PRIVATE KEY----- MIIJQwIBADANBgkqhkiG9w0BAQEFAASCCS0wggkpAgEAAoICAQDPzCORz9kUh4yt 73fiG1amQ16jwjXNzNO0d4xUWlrCP3dTfXnvtF35r2N/5Nefw9CcztBUAZACbwtn (... just sample ...
0
votes
1answer
25 views

How to configure gpg-agent to work correctly with obnam?

I'm trying to set up the de-duplicating backup program obnam so that it backups encrypted chunks on a remote server (raspberry pi B3 through ssh with USB hard drive) but can't get it even starting to ...
1
vote
1answer
22 views

gpg problem in using pass password manager

I would like to use the "pass" password manager. I don't seem to be able to get pass to recognize my public key. $ gpg2 --list-keys /home/johndoe/.gnupg/pubring.gpg ------------------------------- ...
1
vote
0answers
25 views

Dictionary attack GPG symmetric encrypted LUKS keyfile

I remember typing in a long phrase for the password. I wrote all the words I could have possibly used into a plain text file, combining the words I know were used in a certain order. I might have ...
2
votes
1answer
75 views

Disable gnome-keyring-daemon

Methods I have tried: https://wiki.gnupg.org/GnomeKeyring https://blog.josefsson.org/tag/keyring/ Removing the GNOME Keyring applications from Startup Applications ...
1
vote
0answers
61 views

gpg -recv-keys hangs when not run by root

I am trying to install a patched kernel form Arch User Repository but getting One or more PGP signatures could not be verified! error. I looked at the PKGBUILD and attempted to add the keys with the ...
0
votes
0answers
84 views

GPG error installing VLC in Fedora 20

I'm installing VLC in Fedora and I get this error: warning: /var/cache/yum/x86_64/20/rpmfusion-free-updates/packages/faad2-libs-2.7-5.fc20.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID ...
0
votes
1answer
51 views

Trying to verify file integrity with GnuPG. “BAD signature” all the time

I'm completely new to GnuPGP and I'm trying to test it. Basically, what I've done is downloaded the Linux Mint key (ID 0FF405B2) from pgp.mit.edu. gpg --keyserver pgp.mit.edu --recv-keys 0FF405B2 ...
2
votes
1answer
58 views

Use my ssh key to sign git commits

I am trying to setup automatic signing of git commits with gpg. I have a private/public key pair, that I use to authenticate to the server and be able to push commits. I would like to use the same key ...
3
votes
1answer
42 views

gpg: “secret key not available” when sec & pub key are in keyring

I received an file encrypted with the public key I generated but I can't get it to decrypt. Steps: gpg key-gen default options gpg --export -a <email> > pub.key sent the pub.key received ...
0
votes
0answers
24 views

Check gpg key capabilities on exported gpg public key

I am trying to write a script which will import public gpg keys onto my keyring. Before importing I would like to make sure that imported key or its subkey actually has Encryption capability (shows as ...
0
votes
2answers
30 views

Why is no second PGP possible?

I've a problem with the command "gpg --gen-key". At my very first time, I connected an eMail-Account to this and everything worked fine. I can use it and so on. No Problem. The problem is: I want to ...
0
votes
1answer
31 views

Why does mutt hang when running gpg in tmux?

I run mutt in tmux and when I run gpg to sign or encrypt, gpg shows a blank screen where I would expect to type my passphrase. I've straced gpg and it shows that it's hanging waiting on a socket ...
1
vote
1answer
20 views

scdaemon/gpg doesn't work

I am trying to setup my Nitrokey (GPG usb Smartcard). I got it to work by adding reader-port into the scdaemon config file. I had to do this because my laptop has multiple built in smartcard readers. ...
2
votes
1answer
125 views

Gentoo Linux GPG encrypts properly a file passed through parameter but throws “Inappropriate ioctl for device” when reading from standard input

I am running Gentoo Hardened with kernel 4.1.7-hardened-r1 and I am trying to encrypt a file using GPG from a shell session opened from SSH and with the DISPLAY variable disabled in order to use ...
3
votes
1answer
93 views

yum update exits with “Didn't install any keys”

I just installed Centos 6.7 on Virtualbox and ran yum update with this output: warning: rpmts_HdrFromFdno: Header V3 RSA/SHA1 Signature, key ID c105b9de: NOKEY Retrieving key from ...
1
vote
2answers
189 views

How to replace GnuPG stable with GnuPG modern?

First I would like to state that I'm an absolute beginner in the Linux environment. For decades I only used Windows. Since a week or two I'm now using Debian for developing a C++ application with ...
1
vote
0answers
44 views

dirmngr does not start with proper home directory unless it is restarted

I am trying to follow these guidelines for gpg best practices: https://help.riseup.net/en/security/message-security/openpgp/best-practices but I am having trouble with dirmngr, which handles all ...
1
vote
0answers
149 views

gpg: passwordless decryption works in terminal, but not in tmux based msmtp/mutt (can't open /dev/tty)

first try: (with --no-tty in my msmtp config) (reboot) head -n 1 ~/.gnupg/gpg.conf use-agent gpg agent is started: % systemctl --user status gpg-agent.service gpg-agent.service - GnuPG private ...
3
votes
1answer
109 views

gpg-agent instead of ssh-agent

I have a Yubikey 4 and I want to use my GPG keys stored on this to authenticate to SSH servers.I want to use GitHub for a start. I have already added my GPG authentication key to GitHub. My problem ...
0
votes
1answer
98 views

How to verify debian cds with gpg?

I have downloaded Debian installation iso from http://cdimage.debian.org/debian-cd/current/amd64/iso-dvd/. I have also downloaded the MD5SUMS and MD5SUMS.sign . I verified the md5sum of iso matches ...
1
vote
2answers
107 views

Pass, how to cache passphrase

I'm started to use unix password manager Pass Some passwords are not critical to me and I'm using them very often So it's became very annoying to me to type passphrase to get some password. Is ...
3
votes
3answers
192 views

How do I tell Mutt to ask for a gpg passphrase?

I'm slowly migrating to mutt after years of Thunderbird and stumped by gpg. I have Mutt signing messages by default, but I don't get asked for a passphrase and then the message fails: gpg: can't ...
1
vote
1answer
45 views

how do i make a script to generate a gpg backup saver?

Im making a little backup script that includes the function to encrypt the backup. The script runs automaticly with a cronjob. So the password for gpg is in a File. Its just a textfile. How can i ...
2
votes
1answer
83 views

Files starting with .#lk0xb in ~/.gnupg directory - what are they?

On a Debian Jessie system: $ ls -al ~/.gnupg/ total 58684 drwx------ 2 username username 4096 Nov 28 20:52 . drwxr-xr-x 50 username username 4096 Nov 28 19:33 .. -rw------- 1 username ...
1
vote
0answers
27 views

Encrypt output of apt-listchanges prior to sending email

Consider the following scenario: apt-get update && apt-get upgrade I am prompted by apt-get wether to accept and install the pending updates. First, since I have apt-listchanges installed, ...
1
vote
1answer
99 views

Finish entering text in GPG

If you call GPG without input, it just says gpg: Go ahead and type your message ... You can enter text and everything, but how do you end the input? I've seen something like this in multiple ...
1
vote
0answers
227 views

gpg2 decryption timeout/no secret key

I'm having an issue decrypting files with gpg2. I originally encrypted the files with gpg version 1.4. The machine I'm on now has both gpg (1.4) and gpg2. Decryption with gpg works just fine, but ...
-1
votes
1answer
169 views

Using GPG, encrypt a file with private key

I'm setting up a system to update software on a device and I would like to encrypt the update files using a private key that I have created and then decrypt them with the public key. All of the ...
0
votes
1answer
937 views

Debian jessie GPG error Clearsigned file isn't valid

This is what I get when running apt-get update: /root$ sudo apt-get update Get:1 http://security.debian.org jessie/updates InRelease [1,507 B] Get:2 http://cdn.debian.net jessie InRelease [1,507 B] ...
6
votes
3answers
584 views

Is there a way to source an encrypted (GPG) file on-the-fly in a script?

I need a bash script to source a file that is encrypted, as the file being sourced contains sensitive information. I would like the script to prompt for the GPG passphrase and then run, sourcing the ...
2
votes
1answer
173 views

Change pinentry program temporarily with gpg-agent

I use gpg-agent sometimes with no X display or over ssh, so my config file contains: pinentry-program /usr/bin/pinentry-curses This way, the gpg passphrase is requested in curses. That said, in ...
3
votes
1answer
66 views

How can I search gpg-encrypted email with notmuch-mutt?

I'm using mutt, with notmuch-mutt indexing the mail. I have a macro defined in mutt to search multiple mailboxes, using notmuch's integration (as suggested in the man page). macro index <F3> \ ...
2
votes
1answer
53 views

Encrypt multimedia files with GPG

Is it possible to encrypt pictures and other files like audio etc with GPG? If yes then how to? If not then why not?.
4
votes
1answer
87 views

How can I encrypt with my previous GPG subkey after creating a new one?

I recently generated two new subkeys to put on an external key card. I previously had a master key (usage marked SC) and a single subkey (marked E). This arrangement was worked fine for what I needed ...
1
vote
1answer
628 views

How to make gpg find gpg-agent

On Fedora 22, gpg doesn't find gpg-agent: % gpg-agent --daemon % gpg -vvv --use-agent --no-tty --decrypt file.gpg gpg: using character set `utf-8' :pubkey ...
0
votes
1answer
80 views

python gnupg cannot user keychain keys

I have an issue using the gnupg module in python in Ubuntu 14. My keychain is set up correctly. I can use gpg on the command line to decrypt files with having to enter my passphrase. I have also ...
2
votes
1answer
33 views

How to configure apt to trust CDs

The debian secure apt page states that apt can be configured to always trust files from a CD. However, I can't find documentation of how to do this configuration. It's also worth noting that newer ...
1
vote
1answer
23 views

Force enigmail to sign with a specific subkey

I have a GPG key with multiple signing subkeys and I want to force enigmail to sign email with a specified subkey. GPG can be forced to sign with a specific subkey by appending the characted "!" after ...
4
votes
0answers
66 views

About pinentry usage along with gpg

Is mandatory to use pinentry with gpg2? Why is pinentry better over legacy prompt?