gpg is the main command line tool of the GNU Privacy Guard (GnuPG), implementing the OpenPGP standard for public key cryptography. It allows encryption, (verification of) signatures and trust models like the web of trust. gpg (and its library gpgme) are the base of many FOSS crypto applications (...

learn more… | top users | synonyms

2
votes
3answers
471 views

Is there a way to GLOBALLY set the DEFAULT keyserver for gpg on Debian?

I am not asking for per-request of a key, I know how to do that, but I want a chosen alternative gpg keyserver to be defaulted to, when no specific keyserver is specified in a request then-on-out. ...
2
votes
2answers
71 views

Securely viewing an encrypted file

I have a file that is gpg encrypted. I would like to view the content of the file, but leave no trace of the output. Lets say for example that the encrypted file has some passwords, and I don't want ...
2
votes
2answers
568 views

Hard drive partition and updating trouble

I'm new to linux and am using Linux Mint 15 Olivia. I am running it alongside windows 7 and I want to increase the size of my current linux hard drive partition. I read somewhere that I should install ...
0
votes
2answers
30 views

Why is no second PGP possible?

I've a problem with the command "gpg --gen-key". At my very first time, I connected an eMail-Account to this and everything worked fine. I can use it and so on. No Problem. The problem is: I want to ...
0
votes
2answers
618 views

trying to install chef-client package via local yum repo

I am trying to make chef-11.16.4-1.el6.x86_64.rpm available to our servers via a local yum repo that we've built. it is not available in RHEL Repos, so i had to manually download and save it in our ...
6
votes
1answer
248 views

using GPG key in Gajim without passphrase

I would like to use gpg key with Gajim (jabber client) without a passphrase. I have generated my gpg key without a passphrase (or with an empty passphrase, I don't know which - I just just pressed ...
2
votes
1answer
110 views

Disable gnome-keyring-daemon

Methods I have tried: https://wiki.gnupg.org/GnomeKeyring https://blog.josefsson.org/tag/keyring/ Removing the GNOME Keyring applications from Startup Applications http://lechnology.com/software/...
2
votes
1answer
145 views

What GPG agent does Elementary Luna use?

Whenever I try decrypting or signing files with GPG in Elementary Luna, I see a graphical password prompt come up for my GPG key. The key is then cached in memory for future requests for some time. ...
1
vote
1answer
29 views

Problem configuring GPG pinentry

I have two hosts, A and B. On A I have the gpg pinentry program setup to be pinentry-curses but I have no idea how I did it anymore. I can not seem to find the difference between A and B, but on A (...
1
vote
1answer
330 views

How can I tell gpg that I do not want password caching for a specific program?

I'm using gnupg 2.1.2. Usually it is quite handy when gnupg caches my passwords. But for some sensitive programs I would prefer that gnupg does not cache them with gpg-agent. I searched a good while ...
1
vote
1answer
109 views

GPG Problems When Releasing With Leiningen

I'm trying to use lein release (default, not the plugin). Now, I've installed gpg-agent and pinentry-curses, and gotten to the point where a separate curses screen appears, asking me for my secret ...
0
votes
1answer
35 views

How to configure gpg-agent to work correctly with obnam?

I'm trying to set up the de-duplicating backup program obnam so that it backups encrypted chunks on a remote server (raspberry pi B3 through ssh with USB hard drive) but can't get it even starting to ...
0
votes
1answer
95 views

python gnupg cannot user keychain keys

I have an issue using the gnupg module in python in Ubuntu 14. My keychain is set up correctly. I can use gpg on the command line to decrypt files with having to enter my passphrase. I have also ...
0
votes
1answer
320 views

Create yum repo with multiple keys

I need to create a yum repository but I have 5 gpgkeys, the idea is to configure the repo and each package install its own gpgkey automatically. In other words, I need to configure multiple gpgkeys ...
0
votes
1answer
48 views

Enforcing minimum passphrase length with gpg

When encrypting a file with --symmetric option, gpg asks for the passphrase using the pinentry program (small window). I want it to reject passphrases below a certain length. How can I do this?
0
votes
1answer
61 views

Extract only the key(s) from GPG exported keypair

I have exported public and private keys to file with gpg --export and --export-secret-keys. When I examine them with gpg --list-packets. I can see that the file contains: the actual key the user ID ...
4
votes
0answers
71 views

About pinentry usage along with gpg

Is mandatory to use pinentry with gpg2? Why is pinentry better over legacy prompt?
4
votes
0answers
60 views

Reading GPG passphrase from the physical keyboard in OpenBSD

I'm using Synergy to control an OpenBSD desktop from a Linux computer (think of it like a VNC client/server). That is to say what I type on the keyboard goes through a network connection before it ...
3
votes
0answers
12 views

How to make PGP's output less verbose in mutt with GnuPG & TOFU?

I recently added trust-model tofu+pgp in my .gnupg/gpg.conf to use TOFU and automatically trust (marginally) keys from e-mails I see for the first time. It has the bad consequence of making PGP's ...
3
votes
0answers
123 views

Enigmail Thunderbird pinentry requests all passwords to all secret keys

I want to read a GPG encrypted email using Thunderbird Enigmail from Account.1@mail.com and Edit > Account Settings > Account.1 > OpenPGP Security has "Use specific OpenPGP key ID" selected. However, ...
3
votes
0answers
365 views

How do I combine SSH agent forwarding and gpg-agent?

I have an ssh-agent running on my local machine. I connect to a remote machine via SSH, with agent forwarding enabled. On that remote there is an instance of gpg-agent running. I know that recent ...
3
votes
0answers
1k views

reprepro and gpg-agent - passphrase won't be cached

I'm getting a little frustrated here, maybe you got an idea what the problem could be: I have a buildprocess with a few reprepro commands at the end The buildscript is executed with sudo ( cd "$...
2
votes
0answers
73 views

GPG Key Generation Fails on Alpine Linux Docker Image

I've performed the following test on a docker alpine linux: ole@MKI:~$ docker run --rm -it alpine /bin/ash / # apk add --update duplicity fetch http://dl-4.alpinelinux.org/alpine/v3.3/...
2
votes
0answers
14 views

Use GnuPG by default in Evolution

Is there a way to make Evolution default to encrypting messages with GnuPG? It'd be acceptable if Evolution complains and refuses to send unencrypted emails to addresses for which it lacks a gpg ...
2
votes
0answers
363 views

Decrypting with GPG after a “su - different user”

I have cron job running a script in the cron of "USER A" that encrypts many files in a loop using the gpg command below: gpg --batch --cipher-algo AES256 --passphrase "PASSWORDISHERE" -c FILENAME "...
2
votes
0answers
268 views

How can I PGP decrypt an entire mbox?

Thunderbird cannot search PGP-encrypted emails. Hence, I was considering copying all my emails from IMAP to local storage, then decrypting them all locally, so that they are searchable. Is this ...
2
votes
0answers
26 views

Password dialogs block keybindings

I am using XMonad 0.11, but this might be unrelated. I am using evolution 3.12.2 and this is related but the problem might be more general. After research it appears that the window in question is ...
2
votes
0answers
158 views

SSH + Certificate Authority server?

Is it possible to setup SSH (via pam for instance) to check the public key of the connecting client against a CA server? I've tried with gnupg (via gpg-agent --daemon --enable-ssh-support) and also ...
2
votes
0answers
145 views

What does apt need to be healed of a bad setup?

I made a couple of earlier posts regarding a libssl-dev that, it seemed, was not removable. Some of the replies touched on that there was a problem with apt, and now that someone posted the command to ...
1
vote
0answers
29 views

gpg-agent problems on Manjaro Linux (KDE)

Recently Github announced support for signed commits, so I configured Git: git config --global user.signingkey F03CB372 git config --global commit.gpgsign true I already had a GPG key F03CB372, ...
1
vote
0answers
27 views

Dictionary attack GPG symmetric encrypted LUKS keyfile

I remember typing in a long phrase for the password. I wrote all the words I could have possibly used into a plain text file, combining the words I know were used in a certain order. I might have ...
1
vote
0answers
76 views

gpg -recv-keys hangs when not run by root

I am trying to install a patched kernel form Arch User Repository but getting One or more PGP signatures could not be verified! error. I looked at the PKGBUILD and attempted to add the keys with the ...
1
vote
0answers
54 views

dirmngr does not start with proper home directory unless it is restarted

I am trying to follow these guidelines for gpg best practices: https://help.riseup.net/en/security/message-security/openpgp/best-practices but I am having trouble with dirmngr, which handles all ...
1
vote
0answers
173 views

gpg: passwordless decryption works in terminal, but not in tmux based msmtp/mutt (can't open /dev/tty)

first try: (with --no-tty in my msmtp config) (reboot) head -n 1 ~/.gnupg/gpg.conf use-agent gpg agent is started: % systemctl --user status gpg-agent.service gpg-agent.service - GnuPG private ...
1
vote
0answers
27 views

Encrypt output of apt-listchanges prior to sending email

Consider the following scenario: apt-get update && apt-get upgrade I am prompted by apt-get wether to accept and install the pending updates. First, since I have apt-listchanges installed, ...
1
vote
0answers
248 views

gpg2 decryption timeout/no secret key

I'm having an issue decrypting files with gpg2. I originally encrypted the files with gpg version 1.4. The machine I'm on now has both gpg (1.4) and gpg2. Decryption with gpg works just fine, but ...
1
vote
0answers
306 views

E: GPG error: http://downloads.sourceforge.net all Release: The following signatures were invalid: NODATA 1 NODATA 2

Following is the output for sudo apt-get update Get:1 http://deb.torproject.org precise Release.gpg [490 B] Get:2 http://deb.torproject.org precise Release [3,709 B] ...
1
vote
0answers
184 views

How can I have pinentry ask if a password should be remembered?

In this answer, the password prompt for gpg-agent includes options for how long the password should be remembered. However, in my system I get a much simpler prompt, without that option How can ...
1
vote
0answers
328 views

gpg: Bad signature

I'm trying to sign a public PGP key but am encountering a 'Bad signature' error: gpg --edit-key someone@somedomain.com ... gpg> sign ... You need a passphrase to unlock the secret key for user: "...
1
vote
0answers
83 views

Create global enviromental variable after boot

I know about /etc/profile and /etc/environment, but I would like to set a global environmental variable after boot and login. By global, I mean an environment variable that can be accessed by any ...
1
vote
0answers
116 views

Recovering GPG keys from a backup directory

I have a backup image mounted at /mnt. I need to recover (and revoke) a key in the secret keyring on this backup. How can I list keys and generate a revocation key for a key stored in this other ...
0
votes
0answers
22 views

Issue changing passphrase for gpg key

I've export my gpg key from the machine they were created to another server. In the new server I've tried to use the imported key to decrypt some files I've received, but I got the following error: ...
0
votes
0answers
117 views

GPG error installing VLC in Fedora 20

I'm installing VLC in Fedora and I get this error: warning: /var/cache/yum/x86_64/20/rpmfusion-free-updates/packages/faad2-libs-2.7-5.fc20.x86_64.rpm: Header V3 RSA/SHA256 Signature, key ID ...
0
votes
0answers
35 views

Check gpg key capabilities on exported gpg public key

I am trying to write a script which will import public gpg keys onto my keyring. Before importing I would like to make sure that imported key or its subkey actually has Encryption capability (shows as ...
0
votes
0answers
192 views

'Pass' password manager - does it require public key?

The 'pass' password manager uses gpg keys. http://www.passwordstore.org/ However, gpg itself can be used for symmetric encryption of files. Does pass only work using public/private keys, or is it ...
0
votes
0answers
670 views

Using gpg-agent to decrypt password in cron job

I have two scripts that both need to decrypt passwords using gpg-agent. Both of them run fine when launched from the terminal. The problem is that when run via cron, they both fail with these messages:...