Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [gpg]

gpg is the main command line tool of the GNU Privacy Guard (GnuPG), implementing the OpenPGP standard for public key cryptography. It allows encryption, (verification of) signatures and trust models like the web of trust. gpg (and its library gpgme) are the base of many FOSS crypto applications (like mail user agents). There is a standalone version (1.x) and one (2.x) requiring gpg-agent for secret key handling.

0
votes
0answers
19 views

Why does gpg --recv-keys work as root but not as a normal user?

As root: # gpg --recv-keys DF9B9C49EAA9298432589D76DA87E80D6294BE9B gpg: keybox '/root/.gnupg/pubring.kbx' created key DA87E80D6294BE9B: 61 signatures not checked due to missing keys gpg: /root/....
-3
votes
1answer
42 views

gpg: --armor vs --clearsign

gpg has an option --armor, which can generate output in an ASCII-armored format similar to uuencoded documents. It also has an option --clearsign which causes the document to be wrapped in an ASCII-...
2
votes
1answer
339 views

Why doesn't gpg need us to specify which keys for encryption and decryption?

The GNU Privacy Handbook says: The command-line option --sign is used to make a digital signature. The document to sign is input, and the signed document is output. alice% gpg --output doc.sig --...
0
votes
0answers
11 views

How to forward GPG to a linux machine from Windows?

Here is my set up: Windows 10 machine, my desktop PC. Ubuntu 18 machine, this is my home server Yubikey, has my private GPG keys on it My work flow is as follows: Plug in my Yubikey into USB port ...
0
votes
2answers
24 views

How to find out which public key is actually in use and remove deprecated ones (gpg)?

I'm on Linux Mint 19.1 Cinnamon. I have a minor problem with identifying the actual up-to-date GPG public key used by apt-get with Spotify music application. I would like to remove the old - ...
1
vote
1answer
32 views

debsign: no entry data.tar.gz in archive error

I have created a binary deb package with dpkg-deb command. It is installable and works. > dpkg-deb --build /test dpkg-deb: building package `xxx' in `test.deb'. Now I want to sign the package, ...
0
votes
1answer
18 views

gpg decryption of multiple subdirectories

How do I decrypt files that are stored in cascade subdirectories with gpg? Something like a bash script: for file in all_subdirs; do gpg --passphrase passphrase *.gpg
2
votes
1answer
51 views

Encrypting a password using gpg without constantly asking for password

I have a service that checks my email regularly, and I use gpg to encrypt my email password. The problem is that every time I lock my computer or after a certain amount of time gpg shows a graphical ...
1
vote
1answer
54 views

gpg --passphrase-file doesn't work as root?

I'm trying to encrypt our backups using GnuPG as a pipe (reading from stdin and writing to stdout). The passphrase is read from a file. An example command: echo "mysecret" | gpg --passphrase-file ...
0
votes
0answers
71 views

How to resolve following error in decrypting a file?

gpg: AES256 encrypted data gpg: encrypted with 1 passphrase gpg: decryption failed: Bad session key I am doing decryption by ...
0
votes
1answer
55 views

gpg: signing failed: Operation cancelled under tmux?

I have found a strange error. It is OK when I commit using gpg with git under bash or zsh. git commit -S -m "xxx" However when I commit it under tmux, I got: gpg: signing failed: Operation ...
3
votes
1answer
305 views

Importing keys from keyring.debian.org fail

Updating repositories with apt update fails since the public keys of several signatures are not available. $ sudo apt update Get:1 http://security.debian.org/debian-security stretch/updates InRelease ...
3
votes
1answer
76 views

Debian 8 Jessie errors on all MariaDB mirrors : Signature by key 199369E5404BD5FC7D2FE43BCBCB082A1BB943DB uses weak digest algorithm (SHA1)

I've inadvertently stepped into "update hell". I updated a number of dependencies trying to install the Gerbera media server. In the process several existing services stopped running, including ...
0
votes
0answers
9 views

GPG: multiple [A] subkey services

In case I have two git public repo like gitlab, github and each using different gpg authen subkey. I'd like to have two systemd user level service gpg-agent that cache passpharse of each subkey, the ...
0
votes
1answer
47 views

GPG: [E] subkey's public key is the same as master's public key?

I import [E] subkey to different folder from ~/.gnupg, and export subkey's public key with --homedir option. I can see subkey's public key has less lines than master's plublic, using diff results ...
2
votes
2answers
56 views

Edit GnuPG encrypted file with no graphic interface

I am trying to edit an encrypted file remotely, with no X-forwarding. Locally, when I launch: emacs myfile.gpg A pop-up window opens in which I enter my passphrase. I'd like to have something ...
1
vote
1answer
943 views

How to export a GPG private key and public key to file

I have generated keys using GPG, by executing following command gpg2 --gen-key. However i need to export key pair to a file. ie private and public key to private.pgp and public.pgp respectively
0
votes
1answer
100 views

gpg2 and git signing

I have a problem with gpg2 and signing my commits in git. I should preface all this by saying this all worked yesterday before I did an apt-get update && apt-get upgrade and a reboot. Now ...
0
votes
1answer
111 views

www-data user cannot generate gpg key

I am trying to set up passbolt on a Debian 9 KVM guest, and one of the steps is to generate a GPG key as the www-data user. Unfortunately, whenever I try to do this (by running gpg --gen-key as the ...
2
votes
1answer
69 views

Where does GPG Agent store the passphrase — I need to restore it

I forgot my GPG key passphrase. I know my computer is storing it somewhere because I decrypt strings with it, without a password, for example: $ gpg --decrypt -r me@example.com ~/.password-store/...
0
votes
1answer
45 views

GPG Lost Secret Key

Earlier on today I decided to backup my laptop and re-install everything. I thought I backed up the GPG keys correctly but it turns out I only exported my public key. I understand that I can't get ...
0
votes
1answer
69 views

How to detach-sign a file with a specific private key? || Why this fails?

I have a .tar.xz file which I would like to detach-sign using my gpg private key. The problem is, I have multiple of private keys imported to my keyring and need to choose, which one to use. ...
4
votes
1answer
71 views

How do I distrust an Apt key in Debian Linux?

How do I distrust an Apt key in Debian Linux, or prevent one from being silently added via apt-key (like most commercial packages tend to do in their postinst scripts)? If I run apt-key adv --edit-...
-1
votes
1answer
27 views

GPG cache options don't work

There is an option named default-cache-ttl that controls how long the agent will remember the password to the private key. However, when I put it in the config file it doesn't work - instead, gpg ...
0
votes
1answer
150 views

gpg-agent is running, but I'm always prompted for password

When I run gpg2, I'm prompted for a password every time I use it. Based on my reading of the gpg-agent man pages, I should only be prompted the first time. gpg-agent is a daemon to manage secret (...
0
votes
1answer
367 views

gpg: keyserver receive failed: Address family not supported by protocol

System: Linux Mint 19 Cinnamon, based on Ubuntu 18.04. Upon my limited knowledge of gpg, which version I will state here for future references: gpg (GnuPG) 2.2.4 libgcrypt 1.8.1 I thought the ...
0
votes
1answer
167 views

dpkg-source: warning: failed to verify signature

System: Linux Mint 19 Cinnamon, based on Ubuntu 18.04. In this answer, I am being pointed at a different solution, other than installing directly from source. Since I haven't ever used dget, I must ...
1
vote
2answers
105 views

SUSE Linux Signature verification failed

When I code, build and sign .rpm file for SUSE Linux, it is signed successfully as follows: rpm --checksig -v xxx.rpm Header V4 RSA/SHA256 Signature, key ID 7936b039: OK Header SHA1 digest: OK ...
0
votes
1answer
87 views

How to make `tty` work in .bash_profile

I have the following in my ~/.bash_profile in order to try to make GPG work nicely: export GPG_TTY="`tty`" But when I open a new shell, I get the following: $ echo $GPG_TTY not a tty However, if ...
0
votes
0answers
103 views

GPG2 No Longer Caching

This just started happening a couple of days ago on Fedora 28. I want GPG to remember my private key passphrase so I can decrypt files without entering the passphrase every time. If I run gpg2 to ...
4
votes
0answers
39 views

How can I see queries to gpg-agent?

I am using gpg-agent together with a Yubikey to securely store my GPG keys. In addition I've enabled so that whenever a authentication, sign or decryption request happens I must physically push the ...
4
votes
1answer
170 views

Security of bash script involving gpg symmetric encryption

Notice: the very same vulnerability has been discussed in this question, but the different setting of the problem (in my case I don't need to store the passphrase) allows for a different solution (i.e....
1
vote
1answer
504 views

How do I get the fingerprint of an ASCII-armored PGP secret key with gpg?

I have a file secret.asc containing an ASCII-armored (i.e., plain text and starts with -----BEGIN PGP PRIVATE KEY BLOCK-----) PGP/GPG secret/private key, and I would like to know its 40-character key ...
2
votes
1answer
176 views

yum update shows three exclamation marks

yum update Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile gitlab_gitlab-ce/x86_64/signature | 836 B 00:00:00 gitlab_gitlab-ce/x86_64/signature | ...
2
votes
1answer
55 views

How can a public key contain several public keys with GPG (or what am I doing wrong)?

I'm setting up some Ubuntu servers. I received from another sysadmin a key to be added (call it somekey.pub) for apt package verification on in-house packages. Adding this key with apt-key add ...
1
vote
0answers
262 views

How do I verify linux kernel signature with gpg?

Following the notes at the kernel.org site, but I cannot seem to verify the signature of the kernel. I tried to use the given script to handle it for me, but that has failed too. user@localhost ~ $ ...
0
votes
0answers
54 views

Claws Mail gpg uid

I have a gnupg keyring with three uids. When sending an email using Claws Mail the default identity (myself1@firstmail.com) is always used to sign the mail regardless of the mail account used to send ...
1
vote
0answers
19 views

Backing up GnuPG

I am not sure how to securly backup my .gnupg folder or to be specific my private key. I googled and found that people recommended just copying the whole .gnupg folder. Is there a safer way to Backup ...
0
votes
0answers
54 views

gpg batch: created an empty secring file

I'm using the following command to generate a gpg key #!/bin/bash cat > /tmp/gpg.txt << EOF %echo Generating a basic OpenPGP key Key-Type: DSA Key-Length: 1024 Subkey-Type: ELG-E Subkey-...
1
vote
1answer
98 views

How do I verify https://files.devuan.org/devuan-devs.gpg

I am running Devuan Jessie. I want to install another Devuan Ascii from scratch. So I downloaded: https://files.devuan.org/devuan_ascii/installer-iso/devuan_ascii_2.0.0_amd64_netinst.iso https://...
0
votes
1answer
43 views

Why does rpmfusion recommend the nogpgcheck switch?

See the commandline RHEL/CentOS section at https://rpmfusion.org/Configuration/ Doesn't this --nogpgcheck switch allow for tampering to happen unnoticed?
0
votes
1answer
79 views

Does gpg-agent have a GUI?

Is there a GUI of application gpg-agent ? How I can start it ? I need to change some settings there, but can't find it.
1
vote
1answer
1k views

How to solve gpg: bad data signature from key: KEY_ID Wrong key usage (0x19, 0x2)

I'm using Arch Linux Linux uplink 4.14.56-1-lts #1 SMP Tue Jul 17 20:11:42 CEST 2018 x86_64 GNU/Linux. I'm trying to solve a problem I'm currently have with GnuPG 2.2.9 (libgcrypt 1.8.3), but I've ...
7
votes
1answer
4k views

gpg: WARNING: unsafe ownership on homedir '/home/user/.gnupg'

System: I am testing Linux Mint 19 Beta based on Ubuntu 18.04. I got this warning while installing an unrelated package: gpg: WARNING: unsafe ownership on homedir '/home/vlastimil/.gnupg' This is ...
3
votes
1answer
466 views

Can I use kwallet to manage PGP keys?

I have two PGP keys I use to sign and decrypt e-mails in kmail. When doing so, I have to enter the key's password (currently stored in KeePass). Is it possible to save the passwords in my kwallet in ...
1
vote
1answer
338 views

KEYEXPIRED on Opensuse repository

Running Ubuntu 16.04.4 LTS. On running sudo apt update, the final lines are as follows: W: GPG error: http://download.opensuse.org/repositories/home:/osmc/xUbuntu_16.04 Release: The following ...
0
votes
1answer
310 views

GPG error in Debian Lenny

I got error after aptitude update command: Err http://archive.debian.org lenny/non-fre Packages 404 Not Found [IP: 209.87....
0
votes
0answers
217 views

Webmin MongoDB Repository update fail!

My server OS: Linux/CentOS 7.5 Webmin version: 1.881 This is all (error) message content: Dependencies Resolved ================================================================================ ...
1
vote
1answer
43 views

GPG seems to alter imported keys

So I've never used gpg (2.0.14) before this week and I'm no cryptography pro, but the results I've been getting with gpg seem odd. When I import keys (e.g. gpg --import public.key) that were ...
0
votes
1answer
720 views

How to export and verify a signed gpg public key?

I signed the public key of bob@example.com with 3 of my identities. I did not use lsign so that the signature is exportable. The signatures are listed properly with gpg --list-signatures bob@example....