gpg is the main command line tool of the GNU Privacy Guard (GnuPG), implementing the OpenPGP standard for public key cryptography. It allows encryption, (verification of) signatures and trust models like the web of trust. gpg (and its library gpgme) are the base of many FOSS crypto applications ...

learn more… | top users | synonyms

0
votes
1answer
8 views

Why does mutt hang when running gpg in tmux?

I run mutt in tmux and when I run gpg to sign or encrypt, gpg shows a blank screen where I would expect to type my passphrase. I've straced gpg and it shows that it's hanging waiting on a socket ...
12
votes
7answers
27k views

gpg asks for password even with --passphrase

I expect the following command to extract the gpg file without asking for password: gpg --passphrase 1234 file.gpg But it asks for the password. Why? This also have the same behavior: gpg ...
1
vote
1answer
7 views

scdaemon/gpg doesn't work

I am trying to setup my Nitrokey (GPG usb Smartcard). I got it to work by adding reader-port into the scdaemon config file. I had to do this because my laptop has multiple built in smartcard readers. ...
4
votes
3answers
948 views

Emacs auto encryption and gpg

Emacs encrypts/decrypts .gpg files automatically. But recently I have lost the ability to decrypt files encrypted by the Linux gpg tool and vice versa. I use: passphrase symmetric encryption gnupg ...
3
votes
1answer
31 views

yum update exits with “Didn't install any keys”

I just installed Centos 6.7 on Virtualbox and ran yum update with this output: warning: rpmts_HdrFromFdno: Header V3 RSA/SHA1 Signature, key ID c105b9de: NOKEY Retrieving key from ...
2
votes
1answer
27 views

Gentoo Linux GPG encrypts properly a file passed through parameter but throws “Inappropriate ioctl for device” when reading from standard input

I am running Gentoo Hardened with kernel 4.1.7-hardened-r1 and I am trying to encrypt a file using GPG from a shell session opened from SSH and with the DISPLAY variable disabled in order to use ...
1
vote
2answers
43 views

How to replace GnuPG stable with GnuPG modern?

First I would like to state that I'm an absolute beginner in the Linux environment. For decades I only used Windows. Since a week or two I'm now using Debian for developing a C++ application with ...
1
vote
0answers
15 views

dirmngr does not start with proper home directory unless it is restarted

I am trying to follow these guidelines for gpg best practices: https://help.riseup.net/en/security/message-security/openpgp/best-practices but I am having trouble with dirmngr, which handles all ...
0
votes
0answers
47 views

gpg: passwordless decryption works in terminal, but not in tmux based msmtp/mutt (can't open /dev/tty)

first try: (with --no-tty in my msmtp config) (reboot) head -n 1 ~/.gnupg/gpg.conf use-agent gpg agent is started: % systemctl --user status gpg-agent.service gpg-agent.service - GnuPG private ...
2
votes
3answers
59 views

How do I tell Mutt to ask for a gpg passphrase?

I'm slowly migrating to mutt after years of Thunderbird and stumped by gpg. I have Mutt signing messages by default, but I don't get asked for a passphrase and then the message fails: gpg: can't ...
3
votes
1answer
42 views

gpg-agent instead of ssh-agent

I have a Yubikey 4 and I want to use my GPG keys stored on this to authenticate to SSH servers.I want to use GitHub for a start. I have already added my GPG authentication key to GitHub. My problem ...
3
votes
1answer
820 views

Debian: GPG cannot fetch Linux Kernel key

I am in the process of recompiling the kernel on Debian. Following the instructions on kernel.org, the first step is to verify the signature. But GPG complains that it cannot find the public key: # ...
0
votes
1answer
52 views

How to verify debian cds with gpg?

I have downloaded Debian installation iso from http://cdimage.debian.org/debian-cd/current/amd64/iso-dvd/. I have also downloaded the MD5SUMS and MD5SUMS.sign . I verified the md5sum of iso matches ...
6
votes
3answers
286 views

Silent GnuPG password request with bash commands

I'm trying to hide the "output" of a gnupg command, but it seems that it is always printed. the command is: echo "thisprogramwørks" | gpg -q --status-fd 1 --no-use-agent --sign --local-user D30BDF86 ...
2
votes
2answers
73 views

Pass, how to cache passphrase

I'm started to use unix password manager Pass Some passwords are not critical to me and I'm using them very often So it's became very annoying to me to type passphrase to get some password. Is ...
1
vote
1answer
30 views

how do i make a script to generate a gpg backup saver?

Im making a little backup script that includes the function to encrypt the backup. The script runs automaticly with a cronjob. So the password for gpg is in a File. Its just a textfile. How can i ...
2
votes
1answer
79 views

Files starting with .#lk0xb in ~/.gnupg directory - what are they?

On a Debian Jessie system: $ ls -al ~/.gnupg/ total 58684 drwx------ 2 username username 4096 Nov 28 20:52 . drwxr-xr-x 50 username username 4096 Nov 28 19:33 .. -rw------- 1 username ...
1
vote
0answers
18 views

Encrypt output of apt-listchanges prior to sending email

Consider the following scenario: apt-get update && apt-get upgrade I am prompted by apt-get wether to accept and install the pending updates. First, since I have apt-listchanges installed, ...
1
vote
1answer
79 views

Finish entering text in GPG

If you call GPG without input, it just says gpg: Go ahead and type your message ... You can enter text and everything, but how do you end the input? I've seen something like this in multiple ...
16
votes
6answers
29k views

keyserver timed out when trying to add a GPG public key

I am trying to add a public key for installing a program with CPG. But i am pretty new to this but every command i found gave me the same error: gpg --keyserver keyserver.ubuntu.com --recv-keys ...
1
vote
0answers
80 views

gpg2 decryption timeout/no secret key

I'm having an issue decrypting files with gpg2. I originally encrypted the files with gpg version 1.4. The machine I'm on now has both gpg (1.4) and gpg2. Decryption with gpg works just fine, but ...
0
votes
1answer
416 views

Debian jessie GPG error Clearsigned file isn't valid

This is what I get when running apt-get update: /root$ sudo apt-get update Get:1 http://security.debian.org jessie/updates InRelease [1,507 B] Get:2 http://cdn.debian.net jessie InRelease [1,507 B] ...
-1
votes
1answer
59 views

Using GPG, encrypt a file with private key

I'm setting up a system to update software on a device and I would like to encrypt the update files using a private key that I have created and then decrypt them with the public key. All of the ...
3
votes
2answers
5k views

How to automatically accept epel gpg key

The very first time that I install a package from epel, I am prompted if I want to import a GPG key. Notice how there are 2 'Is this ok' prompts when installing redis? [root@us-devops-build02 ...
9
votes
4answers
5k views

How do I tell which GPG key an RPM package was signed with?

The cryptographic signature of an RPM can be verified with the rpm -K command. This returns a string containing gpg (or pgp) and ending in OK if the signature is in RPM's database and is valid. If ...
5
votes
3answers
396 views

Is there a way to source an encrypted (GPG) file on-the-fly in a script?

I need a bash script to source a file that is encrypted, as the file being sourced contains sensitive information. I would like the script to prompt for the GPG passphrase and then run, sourcing the ...
23
votes
3answers
6k views

How are the GPG usage flags defined in the key details listing?

When I list the details of a key I get output like this: $ gpg --edit-key SOMEID pub [..] created: [..] expires: [..] usage:SC [..] sub [..] created: [..] expires: [..] usage: E Or even usage: ...
1
vote
1answer
68 views

Change pinentry program temporarily with gpg-agent

I use gpg-agent sometimes with no X display or over ssh, so my config file contains: pinentry-program /usr/bin/pinentry-curses This way, the gpg passphrase is requested in curses. That said, in ...
3
votes
0answers
30 views

How can I search gpg-encrypted email with notmuch-mutt?

I'm using mutt, with notmuch-mutt indexing the mail. I have a macro defined in mutt to search multiple mailboxes, using notmuch's integration (as suggested in the man page). macro index <F3> \ ...
3
votes
1answer
174 views

Keep private key for remote reprepro package archive local

Currently I am using reprepro and inoticoming to maintain a Debian package archive on a remote machine. The repo is configured with this distributions file: Origin: ... Label: ... Codename: squeeze ...
2
votes
1answer
38 views

Encrypt multimedia files with GPG

Is it possible to encrypt pictures and other files like audio etc with GPG? If yes then how to? If not then why not?.
4
votes
1answer
63 views

How can I encrypt with my previous GPG subkey after creating a new one?

I recently generated two new subkeys to put on an external key card. I previously had a master key (usage marked SC) and a single subkey (marked E). This arrangement was worked fine for what I needed ...
0
votes
1answer
463 views

pass and gpg: No public key

I'm using the pass for quite a long time; but after exporting my key storage and gpg keys to another machine I see following output: $ gpg --list-key /home/shved/.gnupg/pubring.gpg ...
6
votes
2answers
4k views

I try to add passwords to the “pass” password manager. But my attempts fail with “no public key” GPG errors. Why?

I am trying to install Pass: the standard Unix password manager, however, when I try to add passwords to the appliation I get these errors gpg: Kelly's Passwords: skipped: No public key gpg: [stdin]: ...
0
votes
1answer
49 views

python gnupg cannot user keychain keys

I have an issue using the gnupg module in python in Ubuntu 14. My keychain is set up correctly. I can use gpg on the command line to decrypt files with having to enter my passphrase. I have also ...
1
vote
1answer
92 views

How to make gpg find gpg-agent

On Fedora 22, gpg doesn't find gpg-agent: % gpg-agent --daemon % gpg -vvv --use-agent --no-tty --decrypt file.gpg gpg: using character set `utf-8' :pubkey ...
2
votes
1answer
30 views

How to configure apt to trust CDs

The debian secure apt page states that apt can be configured to always trust files from a CD. However, I can't find documentation of how to do this configuration. It's also worth noting that newer ...
1
vote
1answer
16 views

Force enigmail to sign with a specific subkey

I have a GPG key with multiple signing subkeys and I want to force enigmail to sign email with a specified subkey. GPG can be forced to sign with a specific subkey by appending the characted "!" after ...
2
votes
0answers
72 views

Enigmail Thunderbird pinentry requests all passwords to all secret keys

I want to read a GPG encrypted email using Thunderbird Enigmail from Account.1@mail.com and Edit > Account Settings > Account.1 > OpenPGP Security has "Use specific OpenPGP key ID" selected. However, ...
1
vote
2answers
139 views

Enigmail plugin does not recognize anymore my private key

I am using a Debian unstable with Iceweasel (38.2.0esr-1) and the Enigmail plugin (2:1.8.2-3) from the distribution packages. I recently upgraded my system and got a new version of the gnupg2 package ...
2
votes
2answers
3k views

Decrypt file using gpg in batch mode when passphrase includes a “!”?

I am trying to decrypt a file in a script with gpg batch mode, but command is not executed because the passphrase contains a "!" echo "m!pass"|gpg --batch --passphrase-fd 0 --decrypt-file plain.gpg ...
3
votes
1answer
181 views

How to use tty allocation to run GPG through SSH?

I am trying to encrypt and sign a local file using a distant GPG installation via SSH: pv file | ssh -tt [ssh server] gpg -se -r [receipt key] > file.gpg Using the double t option removes the ...
4
votes
0answers
49 views

About pinentry usage along with gpg

Is mandatory to use pinentry with gpg2? Why is pinentry better over legacy prompt?
0
votes
0answers
199 views

E: GPG error: http://downloads.sourceforge.net all Release: The following signatures were invalid: NODATA 1 NODATA 2

Following is the output for sudo apt-get update Get:1 http://deb.torproject.org precise Release.gpg [490 B] Get:2 http://deb.torproject.org precise Release [3,709 B] ...
4
votes
4answers
2k views

How to use Emacs to recognize and automatically open GPG encrypted file in ASCII armored format?

gpg -ca passwords.txt create encrypted ASCII file passwords.txt.asc. Emacs open the file as a normal text file: -----BEGIN PGP MESSAGE----- Version: GnuPG v2.0.19 (GNU/Linux) ...
3
votes
2answers
356 views

Usage of pinentry with keepass2 for gpg mail encryption

Debian Jessie, XFCE 4.10, KeePass2, IceDove (with Enigmail).. I'm using KeePass2 generated passwords for my gpg private key, to de/encrypt mails. Icedove is my client which uses the enigmail. As ...
1
vote
0answers
25 views

Installation of R [duplicate]

I want to know about how to install the latest version of R for linux mint First I tried the command: sudo gedit /etc/apt/sources.list Then I typed: sudo apt-key adv --keyserver keys.gnupg.net ...
0
votes
2answers
329 views

trying to install chef-client package via local yum repo

I am trying to make chef-11.16.4-1.el6.x86_64.rpm available to our servers via a local yum repo that we've built. it is not available in RHEL Repos, so i had to manually download and save it in our ...
3
votes
0answers
48 views

Reading GPG passphrase from the physical keyboard in OpenBSD

I'm using Synergy to control an OpenBSD desktop from a Linux computer (think of it like a VNC client/server). That is to say what I type on the keyboard goes through a network connection before it ...
2
votes
2answers
243 views

Is there a way to GLOBALLY set the DEFAULT keyserver for gpg on Debian?

I am not asking for per-request of a key, I know how to do that, but I want a chosen alternative gpg keyserver to be defaulted to, when no specific keyserver is specified in a request then-on-out. ...