gpg is the main command line tool of the GNU Privacy Guard (GnuPG), implementing the OpenPGP standard for public key cryptography. It allows encryption, (verification of) signatures and trust models like the web of trust. gpg (and its library gpgme) are the base of many FOSS crypto applications (...

learn more… | top users | synonyms

3
votes
1answer
14 views

gpg: Signing new key with an old expired one

I missed expiration date of my gpg key and have to generate a new one afterwards. Now I want to establish trust between my old and new key. Naive call like gpg --local-user DE5A457C --sign-key ...
1
vote
1answer
15 views

How can I get mutt to automatically select pgp keys?

Problem I wish encrypt an email to foo@bar.com, using mutt. I have an associated key, which I trust marginally. After attempting to send the email, I have to select from a list of keys, both of which ...
0
votes
0answers
22 views

Issue changing passphrase for gpg key

I've export my gpg key from the machine they were created to another server. In the new server I've tried to use the imported key to decrypt some files I've received, but I got the following error: ...
3
votes
0answers
12 views

How to make PGP's output less verbose in mutt with GnuPG & TOFU?

I recently added trust-model tofu+pgp in my .gnupg/gpg.conf to use TOFU and automatically trust (marginally) keys from e-mails I see for the first time. It has the bad consequence of making PGP's ...
2
votes
1answer
31 views

How to show progress with GPG for large files?

I need to encrypt a large file using gpg. Is it possible to show a progress bar like when using the pv command?
0
votes
0answers
12 views

Real SECURITY? xUbuntu - gpg verified image BUT are ALL packages comprising the OS verified? [duplicate]

I have gpg verified the ISO of xUbuntu but what about all the libraries/packages that comprise it?, have they been gpg verified before the actual OS build and sign? THANKS! Interested to see the ...
1
vote
2answers
37 views

What happens when you verify a detached signature?

I'm trying to understand what happens when verifying a detached gpg signature. Here's an example from the gnupg manual: blake% gpg --verify doc.sig doc gpg: Signature made Fri Jun 4 12:38:46 1999 ...
4
votes
1answer
410 views

Problem with public key on apt-get update

I have Lubuntu 16.04. My problem is similar to this questiuon: sudo apt-get update Get:1 http://it.archive.ubuntu.com/ubuntu xenial InRelease [247 kB] Hit:2 http://ppa.launchpad.net/...
3
votes
1answer
27 views

How do I make GPG use keys accessed over SSH?

I have my GPG keys stored on a remote server (accessible via SSH) due to some technical constraints. Is it possible to make GPG use those keys transferred over ssh, without actually copying them ...
1
vote
1answer
28 views

Problem configuring GPG pinentry

I have two hosts, A and B. On A I have the gpg pinentry program setup to be pinentry-curses but I have no idea how I did it anymore. I can not seem to find the difference between A and B, but on A (...
1
vote
1answer
74 views

How to get pinentry-curses to start on the correct tty?

I use gpg-agent for managing both PGP e SSH identities. The agent is started with a script like this gpg_agent_env="$XDG_CACHE_HOME/gpg-agent.env" export GPG_TTY="$(tty)" if ! ps -U "$USER" -o ...
0
votes
1answer
79 views

linux mint - invalid signature BADSIG 3EE67F3D0FF405B2 for extra.linuxmint.com repository

While trying to run apt-get update on linux mint 17.3 I am getting following error. W: GPG error: http://extra.linuxmint.com rosa Release: The following signatures were invalid: BADSIG ...
2
votes
4answers
354 views

Generating QR code of very big file?

I want to generate a QR code of my 4096-bit armored GPG private key. The key is so big, the program qrencode seems to fail because of its size. $ gpg --export-secret-keys --armor > ~/private.key $ ...
1
vote
1answer
26 views

CentOS - change the password of GPG file by bash script

I am looking for a bash script which input is the old and the new password for changing password of a *.gpg file. I encrypted a txt file with command gpg -c. System create a file.txt.gpg. How can I ...
1
vote
0answers
29 views

gpg-agent problems on Manjaro Linux (KDE)

Recently Github announced support for signed commits, so I configured Git: git config --global user.signingkey F03CB372 git config --global commit.gpgsign true I already had a GPG key F03CB372, ...
2
votes
0answers
72 views

GPG Key Generation Fails on Alpine Linux Docker Image

I've performed the following test on a docker alpine linux: ole@MKI:~$ docker run --rm -it alpine /bin/ash / # apk add --update duplicity fetch http://dl-4.alpinelinux.org/alpine/v3.3/...
1
vote
1answer
65 views

How can I import a key in PEM format (not OpenPGP) into GPG?

I have data like this: -----BEGIN PRIVATE KEY----- MIIJQwIBADANBgkqhkiG9w0BAQEFAASCCS0wggkpAgEAAoICAQDPzCORz9kUh4yt 73fiG1amQ16jwjXNzNO0d4xUWlrCP3dTfXnvtF35r2N/5Nefw9CcztBUAZACbwtn (... just sample ...
0
votes
1answer
33 views

How to configure gpg-agent to work correctly with obnam?

I'm trying to set up the de-duplicating backup program obnam so that it backups encrypted chunks on a remote server (raspberry pi B3 through ssh with USB hard drive) but can't get it even starting to ...
2
votes
1answer
34 views

gpg problem in using pass password manager

I would like to use the "pass" password manager. I don't seem to be able to get pass to recognize my public key. $ gpg2 --list-keys /home/johndoe/.gnupg/pubring.gpg ------------------------------- ...
1
vote
0answers
27 views

Dictionary attack GPG symmetric encrypted LUKS keyfile

I remember typing in a long phrase for the password. I wrote all the words I could have possibly used into a plain text file, combining the words I know were used in a certain order. I might have ...
2
votes
1answer
106 views

Disable gnome-keyring-daemon

Methods I have tried: https://wiki.gnupg.org/GnomeKeyring https://blog.josefsson.org/tag/keyring/ Removing the GNOME Keyring applications from Startup Applications http://lechnology.com/software/...
1
vote
0answers
74 views

gpg -recv-keys hangs when not run by root

I am trying to install a patched kernel form Arch User Repository but getting One or more PGP signatures could not be verified! error. I looked at the PKGBUILD and attempted to add the keys with the ...
0
votes
0answers
111 views

GPG error installing VLC in Fedora 20

I'm installing VLC in Fedora and I get this error: warning: /var/cache/yum/x86_64/20/rpmfusion-free-updates/packages/faad2-libs-2.7-5.fc20.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID ...
0
votes
1answer
89 views

Trying to verify file integrity with GnuPG. “BAD signature” all the time

I'm completely new to GnuPGP and I'm trying to test it. Basically, what I've done is downloaded the Linux Mint key (ID 0FF405B2) from pgp.mit.edu. gpg --keyserver pgp.mit.edu --recv-keys 0FF405B2 ...
2
votes
1answer
62 views

Use my ssh key to sign git commits

I am trying to setup automatic signing of git commits with gpg. I have a private/public key pair, that I use to authenticate to the server and be able to push commits. I would like to use the same key ...
3
votes
1answer
54 views

gpg: “secret key not available” when sec & pub key are in keyring

I received an file encrypted with the public key I generated but I can't get it to decrypt. Steps: gpg key-gen default options gpg --export -a <email> > pub.key sent the pub.key received ...
0
votes
0answers
35 views

Check gpg key capabilities on exported gpg public key

I am trying to write a script which will import public gpg keys onto my keyring. Before importing I would like to make sure that imported key or its subkey actually has Encryption capability (shows as ...
0
votes
2answers
30 views

Why is no second PGP possible?

I've a problem with the command "gpg --gen-key". At my very first time, I connected an eMail-Account to this and everything worked fine. I can use it and so on. No Problem. The problem is: I want to ...
0
votes
1answer
32 views

Why does mutt hang when running gpg in tmux?

I run mutt in tmux and when I run gpg to sign or encrypt, gpg shows a blank screen where I would expect to type my passphrase. I've straced gpg and it shows that it's hanging waiting on a socket read()...
1
vote
1answer
23 views

scdaemon/gpg doesn't work

I am trying to setup my Nitrokey (GPG usb Smartcard). I got it to work by adding reader-port into the scdaemon config file. I had to do this because my laptop has multiple built in smartcard readers. ...
2
votes
1answer
153 views

Gentoo Linux GPG encrypts properly a file passed through parameter but throws “Inappropriate ioctl for device” when reading from standard input

I am running Gentoo Hardened with kernel 4.1.7-hardened-r1 and I am trying to encrypt a file using GPG from a shell session opened from SSH and with the DISPLAY variable disabled in order to use ...
3
votes
1answer
125 views

yum update exits with “Didn't install any keys”

I just installed Centos 6.7 on Virtualbox and ran yum update with this output: warning: rpmts_HdrFromFdno: Header V3 RSA/SHA1 Signature, key ID c105b9de: NOKEY Retrieving key from file:///etc/pki/...
1
vote
2answers
227 views

How to replace GnuPG stable with GnuPG modern?

First I would like to state that I'm an absolute beginner in the Linux environment. For decades I only used Windows. Since a week or two I'm now using Debian for developing a C++ application with ...
1
vote
0answers
53 views

dirmngr does not start with proper home directory unless it is restarted

I am trying to follow these guidelines for gpg best practices: https://help.riseup.net/en/security/message-security/openpgp/best-practices but I am having trouble with dirmngr, which handles all ...
1
vote
0answers
171 views

gpg: passwordless decryption works in terminal, but not in tmux based msmtp/mutt (can't open /dev/tty)

first try: (with --no-tty in my msmtp config) (reboot) head -n 1 ~/.gnupg/gpg.conf use-agent gpg agent is started: % systemctl --user status gpg-agent.service gpg-agent.service - GnuPG private ...
3
votes
1answer
139 views

gpg-agent instead of ssh-agent

I have a Yubikey 4 and I want to use my GPG keys stored on this to authenticate to SSH servers.I want to use GitHub for a start. I have already added my GPG authentication key to GitHub. My problem ...
0
votes
1answer
108 views

How to verify debian cds with gpg?

I have downloaded Debian installation iso from http://cdimage.debian.org/debian-cd/current/amd64/iso-dvd/. I have also downloaded the MD5SUMS and MD5SUMS.sign . I verified the md5sum of iso matches ...
2
votes
2answers
130 views

Pass, how to cache passphrase

I'm started to use unix password manager Pass Some passwords are not critical to me and I'm using them very often So it's became very annoying to me to type passphrase to get some password. Is ...
3
votes
3answers
238 views

How do I tell Mutt to ask for a gpg passphrase?

I'm slowly migrating to mutt after years of Thunderbird and stumped by gpg. I have Mutt signing messages by default, but I don't get asked for a passphrase and then the message fails: gpg: can't ...
1
vote
1answer
51 views

how do i make a script to generate a gpg backup saver?

Im making a little backup script that includes the function to encrypt the backup. The script runs automaticly with a cronjob. So the password for gpg is in a File. Its just a textfile. How can i ...
2
votes
1answer
83 views

Files starting with .#lk0xb in ~/.gnupg directory - what are they?

On a Debian Jessie system: $ ls -al ~/.gnupg/ total 58684 drwx------ 2 username username 4096 Nov 28 20:52 . drwxr-xr-x 50 username username 4096 Nov 28 19:33 .. -rw------- 1 username ...
1
vote
0answers
27 views

Encrypt output of apt-listchanges prior to sending email

Consider the following scenario: apt-get update && apt-get upgrade I am prompted by apt-get wether to accept and install the pending updates. First, since I have apt-listchanges installed, ...
2
votes
1answer
103 views

Finish entering text in GPG

If you call GPG without input, it just says gpg: Go ahead and type your message ... You can enter text and everything, but how do you end the input? I've seen something like this in multiple ...
1
vote
0answers
248 views

gpg2 decryption timeout/no secret key

I'm having an issue decrypting files with gpg2. I originally encrypted the files with gpg version 1.4. The machine I'm on now has both gpg (1.4) and gpg2. Decryption with gpg works just fine, but ...
-1
votes
1answer
211 views

Using GPG, encrypt a file with private key

I'm setting up a system to update software on a device and I would like to encrypt the update files using a private key that I have created and then decrypt them with the public key. All of the ...
0
votes
1answer
1k views

Debian jessie GPG error Clearsigned file isn't valid

This is what I get when running apt-get update: /root$ sudo apt-get update Get:1 http://security.debian.org jessie/updates InRelease [1,507 B] Get:2 http://cdn.debian.net jessie InRelease [1,507 B] ...
6
votes
3answers
630 views

Is there a way to source an encrypted (GPG) file on-the-fly in a script?

I need a bash script to source a file that is encrypted, as the file being sourced contains sensitive information. I would like the script to prompt for the GPG passphrase and then run, sourcing the ...
2
votes
1answer
196 views

Change pinentry program temporarily with gpg-agent

I use gpg-agent sometimes with no X display or over ssh, so my config file contains: pinentry-program /usr/bin/pinentry-curses This way, the gpg passphrase is requested in curses. That said, in ...
4
votes
1answer
68 views

How can I search gpg-encrypted email with notmuch-mutt?

I'm using mutt, with notmuch-mutt indexing the mail. I have a macro defined in mutt to search multiple mailboxes, using notmuch's integration (as suggested in the man page). macro index <F3> \ ...
2
votes
1answer
57 views

Encrypt multimedia files with GPG

Is it possible to encrypt pictures and other files like audio etc with GPG? If yes then how to? If not then why not?.