gpg is the main command line tool of the GNU Privacy Guard (GnuPG), implementing the OpenPGP standard for public key cryptography. It allows encryption, (verification of) signatures and trust models like the web of trust. gpg (and its library gpgme) are the base of many FOSS crypto applications ...

learn more… | top users | synonyms

26
votes
1answer
20k views

How to import secret gpg key (copied from one machine to another)?

I'm trying to copy my gpg key from one machine to another. I do: gpg --export ${ID} > public.key gpg --export-secret-key ${ID} > private.key Move files to new machine, and then: gpg ...
24
votes
3answers
7k views

How are the GPG usage flags defined in the key details listing?

When I list the details of a key I get output like this: $ gpg --edit-key SOMEID pub [..] created: [..] expires: [..] usage:SC [..] sub [..] created: [..] expires: [..] usage: E Or even usage: ...
18
votes
6answers
35k views

keyserver timed out when trying to add a GPG public key

I am trying to add a public key for installing a program with CPG. But i am pretty new to this but every command i found gave me the same error: gpg --keyserver keyserver.ubuntu.com --recv-keys ...
17
votes
2answers
3k views

How can I find out what keys gpg-agent has cached? (like how ssh-add -l shows you cached ssh keys)

ssh-add -l shows you all ssh-keys that have been added with ssh-add ~/.ssh/id_yourkey. How do I do the analogous thing with gpg and gpg-agent, in other words, ask it to show a list of cached keys?
16
votes
1answer
6k views

How to configure gpg to enter passphrase only once per session

Is it posible to configure gpg in a way that I enter passphrase only once, and it will work for the whole session (I'm using Ubuntu/XFce)? I'm not sure how gpg works, it seems that the default ...
14
votes
3answers
6k views

Encrypt OfflineIMAP Password

I'm trying to set up OfflineIMAP to authenticate via a gpg encrypted file (that way I can consolidate all my encryption to my gpg-agent process). From the documentation, it seems the only way to ...
13
votes
8answers
32k views

gpg asks for password even with --passphrase

I expect the following command to extract the gpg file without asking for password: gpg --passphrase 1234 file.gpg But it asks for the password. Why? This also have the same behavior: gpg ...
10
votes
3answers
490 views

mutt: Use gpgme or classic gpg?

Mutt's wiki on GnuPG integration and many other places (like default on Debian) use the classic way of connecting mutt to gnupg. That is, one configures a bunch of commands to call gpg directly. On ...
10
votes
1answer
1k views

Best Practices for SSH, tmux & GnuPG Agent

I'm attempting to consolidate my encryption software to GnuPG, and I'm running into a confusing problem. My primary unit is a headless server, and I exclusively work in tmux. There is no X session, ...
9
votes
4answers
6k views

How do I tell which GPG key an RPM package was signed with?

The cryptographic signature of an RPM can be verified with the rpm -K command. This returns a string containing gpg (or pgp) and ending in OK if the signature is in RPM's database and is valid. If ...
9
votes
2answers
3k views

Adding “random number entropy” for GPG keys?

In the following video: Linux HOWTO: Secure Your Data with PGP, Part 2, you are shown how to create a key pair with gpg. At about 1:50, the instructor says the following: While the key is being ...
9
votes
2answers
851 views

Cache all gpg subkey passwords at once? Prevent need for multiple gpg password entry?

Can I enter my gpg password just once and unlock all my sub keys (signing, decryption, authentication)? At the moment, I need to enter my gpg password three times (for signing, for decryption, for ...
9
votes
1answer
3k views

gpg starting gpg-agent on demand?

The man page of gpg-agent states: The agent is usualy started on demand by gpg, gpgsm, gpgconf or gpg-connect-agent. Thus there is no reason to start it manually. In case you want to ...
8
votes
1answer
1k views

I fail to fetch GPG keys over HKPS with “gpgkeys: HTTP fetch error 1: unsupported protocol” error

I'm trying to fetch some GPG keys over keys.gnupg.net and hkps.pool.sks-keyservers.net and both fails with: gpg: requesting key 1F41B907 from hkps server hkps.pool.sks-keyservers.net gpgkeys: HTTP ...
8
votes
1answer
2k views

How to renew an expired keypair with gpg

What is the best way to renew a gpg key pair when it got expired and what is the reason for the method? The key pair is already signed by many users and available on public servers. Should the new ...
8
votes
2answers
5k views

How can I verify that a PGP key is imported into RPM?

One can import a key with: rpm --import /path/to/key But how can you tell later if you have already imported this key? Trying to reimport it will fail with an error and I am trying to avoid this ...
7
votes
2answers
2k views

RSA 2048 keypair generation: via openssl 0.5s via gpg 30s, why the difference?

RSA 2048 keypair generation: via openssl 0.5s via gpg 30s, why the difference There are several programs which can gerate RSA public/private keypairs GnuPG/OpenPGP for instance has a wizzard being ...
7
votes
1answer
2k views

How does GPG agent work?

I have a line in my gpg.conf file which says use-agent I understand this refers to gpg-agent which is a daemon. The man page states "gpg-agent is a daemon to manage secret (private) keys independently ...
7
votes
3answers
3k views

Receive Pop/IMAP email and then forward as encrypted to gmail

Basically, I have an email account I can access as POP3 or IMAP. I want to take all incoming emails, encrypt them, and then forward the encrypted version to my gmail account (so I can see the ...
6
votes
3answers
5k views

When importing a key during a yum installation, where is that key stored?

I'm installing a piece of software for which I had to use a third-party repository. After adding the repository with rpm -Uvh http://[site], I installed with yum install [package]. One of the ...
6
votes
3answers
540 views

Is there a way to source an encrypted (GPG) file on-the-fly in a script?

I need a bash script to source a file that is encrypted, as the file being sourced contains sensitive information. I would like the script to prompt for the GPG passphrase and then run, sourcing the ...
6
votes
3answers
380 views

Silent GnuPG password request with bash commands

I'm trying to hide the "output" of a gnupg command, but it seems that it is always printed. the command is: echo "thisprogramwørks" | gpg -q --status-fd 1 --no-use-agent --sign --local-user D30BDF86 ...
6
votes
2answers
360 views

What to do when a user switches to a new key?

I have some public keys of multiple users in my keyring in GnuPG. One of these users has switched to a new public key. I still have the user's old key which has an assigned trust of ultimate. I just ...
6
votes
2answers
5k views

I try to add passwords to the “pass” password manager. But my attempts fail with “no public key” GPG errors. Why?

I am trying to install Pass: the standard Unix password manager, however, when I try to add passwords to the appliation I get these errors gpg: Kelly's Passwords: skipped: No public key gpg: [stdin]: ...
6
votes
1answer
241 views

using GPG key in Gajim without passphrase

I would like to use gpg key with Gajim (jabber client) without a passphrase. I have generated my gpg key without a passphrase (or with an empty passphrase, I don't know which - I just just pressed ...
5
votes
4answers
5k views

Encrypt multiple files at once

I'm writing a script which creates project archives and then creates 7z archives of them to make it easier on me to save specific versions and keep encrypted backups. After I've generated the ...
5
votes
1answer
501 views

GPG key pair generation: What do the plus and minus signs mean?

I just generated a new GPG key pair and gpg displays some random plus, minus, greater than, less than and circumflex signs. I was always wondering what they mean. Can you explain it to me? ...
5
votes
1answer
2k views

Get apt's key ids and fingerprints in machine-readable format

I'm trying to patch an issue in puppetlabs-apt to enable the use of key fingerprints as identifiers to ensure that a certain key is present by its 40-digit key fingerprint. I'm having difficulty ...
5
votes
2answers
2k views

How to edit a .gpg file with vi?

So I created a gpg encrypted file with password: gpg -c passwords.txt.gpg how can I open it with vi, edit it, then close it? (So that no passwords.txt file will be created, the decrypted ...
5
votes
1answer
917 views

Connecting SSH and Git to gpg-agent

I'm running a YubiKey NEO with the OpenPGP applet to store my GPG keys on the smart card. I've stopped all other SSH and GPG agents manually by removing their startup entries (On elementary OS Luna, ...
5
votes
2answers
20k views

CentOS yum repository bad Header V4 RSA/SHA1 signature

I was coping with many problems to get stuck with this one. I have installed yum repository on server (CentOS 5.6) with: createrepo -v -s sha yumrepo/ sha is used due to solution to my earlier ...
4
votes
5answers
2k views

How to use Emacs to recognize and automatically open GPG encrypted file in ASCII armored format?

gpg -ca passwords.txt create encrypted ASCII file passwords.txt.asc. Emacs open the file as a normal text file: -----BEGIN PGP MESSAGE----- Version: GnuPG v2.0.19 (GNU/Linux) ...
4
votes
2answers
881 views

Decrypt files encrypted with gpg using xargs

I have a lot of files encrypted with gpg. All files have the same password. Is it possible to use xargs to decrypt files? ls | xargs -n 1 gpg asks for the password for every file.
4
votes
2answers
2k views

Encode directory with GnuPG

Is there any way to encrypt the whole directory using gpg? It accepts only file as input argument. But I need to encrypt a lot of files on external HDD.
4
votes
1answer
77 views

How can I encrypt with my previous GPG subkey after creating a new one?

I recently generated two new subkeys to put on an external key card. I previously had a master key (usage marked SC) and a single subkey (marked E). This arrangement was worked fine for what I needed ...
4
votes
2answers
546 views

Can emacs use gpg-agent in a terminal at all?

I understand that there are problems with getting pinentry-curses to work with emacs (see some of the comments on http://emacswiki.org/emacs/EasyPG), and so using emacs in a terminal isn't compatible ...
4
votes
2answers
5k views

What does gpg error code 2(GPG_ERR_UNKNOWN_PACKET) mean?

I am tasked to explain the variation of gpg errors that happened in one of my batch script. Currently when I perform gpg decrypt for a specified file it returns 2. The problem with this is when I ...
4
votes
3answers
1k views

Emacs auto encryption and gpg

Emacs encrypts/decrypts .gpg files automatically. But recently I have lost the ability to decrypt files encrypted by the Linux gpg tool and vice versa. I use: passphrase symmetric encryption gnupg ...
4
votes
1answer
273 views

measure amount of data read from /dev/random

background I have written a collection of bash scripts (most of them in German only yet but if you are interested; download the archive not the single scripts) which help users create high-quality ...
4
votes
3answers
428 views

Usage of pinentry with keepass2 for gpg mail encryption

Debian Jessie, XFCE 4.10, KeePass2, IceDove (with Enigmail).. I'm using KeePass2 generated passwords for my gpg private key, to de/encrypt mails. Icedove is my client which uses the enigmail. As ...
4
votes
1answer
564 views

Is there a way to embed a GPG public key in a script without adding it to the keyring?

I have a script that basically needs to do the following: #!/bin/bash GPG_PUBLIC_KEY=<<EOF -----BEGIN PGP PUBLIC KEY BLOCK----- Version: GnuPG v1.4.12 (GNU/Linux) ... -----END PGP PUBLIC KEY ...
4
votes
0answers
63 views

About pinentry usage along with gpg

Is mandatory to use pinentry with gpg2? Why is pinentry better over legacy prompt?
3
votes
3answers
149 views

How do I tell Mutt to ask for a gpg passphrase?

I'm slowly migrating to mutt after years of Thunderbird and stumped by gpg. I have Mutt signing messages by default, but I don't get asked for a passphrase and then the message fails: gpg: can't ...
3
votes
3answers
80 views

downloading debian securely

I have a couple of questions on getting a genuine, unmolested version of Debian. MITM attacks are very real and many parties would love to hand you their own, backdoored version of software. I know ...
3
votes
2answers
347 views

How to quickly generate (insecure) GPG keys?

I'd like to automate generating at least two GPG keys for testing and demonstration purposes in a virtual machine. Because of this context I want to make sure the key generation is fast, ideally not ...
3
votes
2answers
1k views

How do I make gpg-agent forget my passphrase automatically?

I'm using Thunderbird with enigmail and gpg. From thunderbird/enigmail, I can't make the gpg-agent forget my passphrase, enigmail tells me I'm using gpg-agent for passphrase management so enigmail ...
3
votes
1answer
434 views

how to check openpgp (gpg) signature against a set of public key blocks

I have some content that needs to be checked against a predetermined whitelist of OpenPGP (also keyword: gpg) public keys for a valid signature by one of them. The whitelist is maintained separately. ...
3
votes
2answers
6k views

How to automatically accept epel gpg key

The very first time that I install a package from epel, I am prompted if I want to import a GPG key. Notice how there are 2 'Is this ok' prompts when installing redis? [root@us-devops-build02 ...
3
votes
1answer
2k views

How to regenerate /etc/apt/trustdb.gpg on Debian?

Suppose one deleted (or damaged) the following file. /etc/apt/trustdb.gpg How to regenerate it?
3
votes
2answers
3k views

Verify a package installed with yum --nogpgcheck having gpg key

due to some network limitations I get this error while installing google chrome from rpmfusion repo: GPG key retrieval failed I have also the gpg key of google chrome downloaded from the same url ...