Skip to main content

Questions tagged [gpg]

gpg is the main command line tool of the GNU Privacy Guard (GnuPG), implementing the OpenPGP standard for public key cryptography. It allows encryption, (verification of) signatures and trust models like the web of trust. gpg (and its library gpgme) are the base of many FOSS crypto applications (like mail user agents). There is a standalone version (1.x) and one (2.x) requiring gpg-agent for secret key handling.

Filter by
Sorted by
Tagged with
0 votes
0 answers
9 views

gpg: No dirmngr although dirmngr is installed

I have used pass as an interface for gpg2 without problem so far on Ubuntu LTS 22.04 but suddently I cannot generate or edit new passwords: $ pass edit newPW gpg: connecting dirmngr at '/run/user/1000/...
ecjb's user avatar
  • 455
-3 votes
1 answer
28 views

Where do I find the fingerprints gpg keys used to sign Linux Mint software?

Where do I find the fingerprints of the gpg keys used to sign the ISO images of the Linux Mint? Linux Mint packages? I would like to find a place where I can download them using a secured method (...
Adalbert Hanßen's user avatar
0 votes
1 answer
15 views

GPG Key to TPM. error from TPM: Card error

When following instructions on how to import a GPG key to a TPM, I get the following error: gpg: error from TPM: Card error. $ gpg --edit-key <key ID> gpg (GnuPG) 2.4.5; Copyright (C) 2024 g10 ...
xyakimo1's user avatar
1 vote
0 answers
22 views

Can't import or create keys in Kleopatra in Arch Linux using KDE (x11)

I'm still new to linux, so please give me time if you need something from me. As the title says I cannot create new key pairs or import existing keys into Kleopatra 3.2.0.240501 (24.05.1). I've just ...
TheBros47874's user avatar
0 votes
0 answers
21 views

GPG key for the OpenSUSE Build Service repository

How to get GPG key for the OpenSUSE Build Service repository? For the error of: Err:13 http://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/xUbuntu_20.04 InRelease The ...
xpt's user avatar
  • 1,644
0 votes
0 answers
22 views

GnuPG often asks for subkey passphrase when signing/encrypting messages even with large [default|max]-cache-ttl in gpg-agent.conf

I have in my ~/.gnupg/gpg-agent.conf the following: default-cache-ttl 172800 max-cache-ttl 172800 which works fine when I am en- or decrypting files using one of my regular GPG key pairs (just a ...
nvx's user avatar
  • 35
0 votes
1 answer
42 views

gpg suddenly won't ask for password, "cancelled by user"

Suddenly, gpg won't ask for password when trying to decrypt file and instead says "cancelled by user". I have already tried.. GPG_TTY=$(tty) export GPG_TTY with no effect. I get the ...
slowcoder's user avatar
0 votes
1 answer
40 views

Decrypting multiple files quicker with gpg

The pass program is a command line utility to store passwords plus free form extra data in small files encrypted with gpg. It provides a grep sub-command in particular to find passwords by the extra ...
Harald's user avatar
  • 928
2 votes
1 answer
46 views

Why does setting `umask` to `0077` (and then downloading public key) makes a gpg public key unavailable for apt?

Why does setting umask to 0077 makes a gpg public key unavailable for apt when installing a package, e.g. umask 0077 curl -fsSLo /usr/share/keyrings/brave-browser-beta-archive-keyring.gpg https://...
John Smith's user avatar
0 votes
0 answers
73 views

gpg: error retrieving '[email protected]' via WKD: No data

I am trying to write a script where I use 7z on some directories, and then use gpg to encrypt them. journalctl -u backup_encrypt_browser.service tells me : gpg: error retrieving '[email protected]' via ...
superuser-Miguel's user avatar
1 vote
0 answers
54 views

How to use pass-secret-service as a keyring provider without breaking gpg?

Recently, I’ve tried to install nheko, a Matrix client, but I failed using it because it complains it cannot store password and other secrets because there are no providers for org.freedesktop.secrets ...
jthulhu's user avatar
  • 111
0 votes
1 answer
102 views

`gpg --pinentry-mode loopback` used to ask passphrase once but now it asks always

In short (Edit 1): How to make gpg -qd --pinentry-mode loopback out.gpg cache the passphrase for a period of time in the cli. It used to cache but now it doesn't. Edit 2: I have tried this thing in ...
mrdolichenus's user avatar
0 votes
1 answer
16 views

how do I access Pass files when logged into my user's shell from another user's session?

I just migrated from keepassxc to the linux pass password utility. But I often find myself su'ing to my user's account from another user's session, and when I try to run any pass commands on entries ...
naphelge's user avatar
0 votes
0 answers
31 views

gpg usage on fedora 39 at 100% cpu due to unknown read error

Both gpg and journalctl are at 100% on my machine. The journal endlessly fills with message: May 15 12:34:42 fedora kgpg[3496]: gpg: /home/some_user/.gnupg/:0: read error This repeats multiple times ...
user avatar
0 votes
0 answers
30 views

gpg unusable secret key

gpg --list-secret-keys --keyid-format=long shows: sec rsa2048/588EFF3348F037FB 2013-04-25 [SCEA] ... uid [ultimate] ... But if I try to sign a file with that key, I get: skipped &...
runrig's user avatar
  • 101
1 vote
2 answers
164 views

add repo to debian (gpg issue)

First, I have done literally hours of work and research on this... attempting to find a solution my self. But I am unable to either understand what I am missing or get all the info I need (not sure ...
C0deGyver's user avatar
0 votes
1 answer
76 views

how to change/add gpg key to pass

I need to change the gpg key originally used for pass on my system to a newly generated key. However, when I follow the advice I found on this thread: https://unix.stackexchange.com/questions/226944/...
naphelge's user avatar
0 votes
1 answer
61 views

re-install pass on Debian sid

pass was recently removed on my Debian sid setup when gpg (namely dirmngr gpg gpg-agent gpg-wks-client gpgsm gpgconf gpgv) were upgraded to unstable version 2.2.40-3. At this time, reinstalling pass ...
ash's user avatar
  • 3
0 votes
1 answer
32 views

GPG: find secret-keyfile that matches my public-key

When I create a keypair with gpg, then it stores the secret key inside of ~/.gnupg/private-keys-v1.d It stores the public-key inside of a keyring-file - I can name it or it uses the default-location. ...
chris01's user avatar
  • 615
0 votes
1 answer
103 views

GPG broken after debian 10 -> 11 upgrade

Just upgraded my Buster server to Debian 11 Bullseye. However, gpg is now broken. apt update fails with Unknown error executing apt-key apt-key --list fails with gpg: symbol lookup error: gpg: ...
color2v's user avatar
  • 153
5 votes
1 answer
227 views

Is it possible to grep this output from gpg

Take the following command (real example) : ~$ gpg --edit-key [email protected] showpref quit (...) [ultimate] (1). Foo Bar <[email protected]> Cipher: AES256, AES192, AES, CAST5, 3DES AEAD: ...
ChennyStar's user avatar
  • 1,795
0 votes
1 answer
61 views

LibreOffice on FreeBSD (GhostBSD) is missing GnuPG encryption entry fields

I set up a FreeBSD 14 (GhostBSD) box with a complete set of my GnuPG keys. Encryption/Decryption on the cli works as expected. I am used to encrypt files within LibreOffice on Linux (on the same ...
faustomaijstral's user avatar
2 votes
1 answer
44 views

gpg-agent "forgetting" password for key, when getting too many requests

I'm running Ubuntu (via Regolith) and my gpg key is unlocked when I log in. I'm running multiple decrypt operations in parallel and I noticed, that if I get above 7, gpg-agent will "forget" ...
fbence's user avatar
  • 505
0 votes
1 answer
94 views

Recover poorly backed up gpg secret keys

I have just restored my data from a borg backup repository after a computer failure. My ~/.gnupg folder seems fine, private keys are there, and permissions look correct. Usually borg does a good job ...
lyndhurst's user avatar
2 votes
0 answers
33 views

How to figure out what is prompting gpg pinentry?

Sometimes I get a pinentry popup from gpg. Although I'm currently playing around with some automation so it is not entirely surprising it would be nice to know what exactly is requesting access to the ...
fbence's user avatar
  • 505
0 votes
1 answer
555 views

How do I resolve a missing GPG key for an apt repo in Debian 12?

I'm currently running Debian 12 and am trying to download some .deb packages for a Debian 8.7 machine that has no access to the internet. To do this, I've configured a new apt repo that targets the ...
Izzo's user avatar
  • 971
0 votes
1 answer
118 views

Totally Legit Signing Key <[email protected]>

I run: gpg --list-keys I get: pub rsa1024 2014-01-26 [C] <REMOVED> uid [ unknown] Totally Legit Signing Key <[email protected]> Can this be dangerous? What is this? ...
Ohumeronen's user avatar
2 votes
1 answer
63 views

gpg expiration TIME?

I have a licence that I'm signing with: gpg --default-sig-expire "2024-02-14" --sign licence This results in: $ gpg --verify licence.gpg gpg: Signature made Tue 13 Feb 2024 08:18:39 AM CET ...
Stewart's user avatar
  • 14.2k
1 vote
1 answer
97 views

How to migrate my encrypted passwords to my new laptop

I'm using pass to store my password. Passwords are stored in ~/.password-store. This has been working for 10 years, but now I have a new laptop. I'm trying to migrate the passwords by copying what I ...
JRR's user avatar
  • 121
0 votes
1 answer
98 views

Having downloaded keyring and imported public key, why is the public key still unavailable for apt?

I am trying to install brave-browser-beta on Debian testing with the following script run as root: #!/bin/bash pdir=$(dirname "${BASH_SOURCE[0]}") skf="${pdir}/brave-beta-signing-key&...
John Smith's user avatar
0 votes
0 answers
33 views

Should you keep the (encrypted) gpg secret key in a file to export the password store on another machine?

I am using gpg and pass to manage my password (on my Macos). I want to read the keychain contained in .password-store on another machine. As there was no public or private key listed in the gpg on the ...
ecjb's user avatar
  • 455
0 votes
1 answer
599 views

GPG hangs on MacOS

When trying to access secret keys, my GPG hangs. The existing solutions suggested killing gpg-agent, but that didn't help for me. I tried debug logging (see below), but couldn't make anything out of ...
Mikko's user avatar
  • 1
0 votes
1 answer
79 views

Change passphrase of SSH key stored in the gpg-agent

How do I change the passphrase of an SSH key that is stored in the gpg-agent?
iGEL's user avatar
  • 101
0 votes
0 answers
235 views

Fedora 39 - How to remove expired GPG key installed by MySQL?

I have the following situation Is not possible install MySQL 8 on Fedora Workstation 39 Pls, see how was installed to understand this post. Anyway I am going in peace to wait until mysql itself ...
Manuel Jordan's user avatar
0 votes
1 answer
303 views

Is not possible install MySQL 8 on Fedora Workstation 39

Through VirtualBox was installed Fedora Workstation 39. Now I tried to install MySQL 8 server . I got the mysql80-community-release-fc39-1.noarch.rpm file from https://dev.mysql.com/downloads/ about ...
Manuel Jordan's user avatar
0 votes
2 answers
615 views

How to Add Ubuntu Repo in Debian

My Question is how to add Ubuntu repository in Debian I mean you can't execute sudo add-apt-repository universe in Debian you can just add its full link or edit /etc/apt/sources.list or add file in /...
Savçı's user avatar
0 votes
0 answers
64 views

Export a GnuPG private key with a different passphrase?

What is the best way to export a private key from a GnuPG keychain, such that the exported key would be encrypted with a different passphrase than the one it's protected by in the keychain? Ideally, I'...
intelfx's user avatar
  • 5,466
0 votes
0 answers
162 views

Can't start gpg-agent for .gnupg folder stored inside a Veracrypt encrypted container

I have my .gnupg directory inside a USB drive encrypted with Veracrypt. Listing the public keys with the gpg --homedir <path-to-usb-gnupg-dir> --list-keys works properly, but problems arise when ...
17ms's user avatar
  • 1
0 votes
1 answer
726 views

dnf install self-signed package Error: GPG check FAILED

I have a repository and a package and want to install it from that repository on Fedora 39. The repository is here for (testing purposes, ignore the bucket name ubuntu, it contains rpm repo) https://...
Oleg Antonyan's user avatar
1 vote
0 answers
151 views

GPG signing failure

Running the commands export GPG_TTY=$(tty) git commit -S -m "message" is resulting in failure to sign the key as the pin entry is still opening in the pop up window. Unusually this was ...
JimGreen's user avatar
0 votes
0 answers
1k views

How to configure Termux APT repositories in Debian?

I'm interested to configure the Termux repositories on a Debian system. However I got stuck on some point. Any help would be appreciated. Premise My scenario is as follows. I have an Android device ...
Krokomot's user avatar
  • 101
0 votes
1 answer
161 views

Find an option other than --quiet to avoid GPG warning when a file is decrypted

GPG decrypt command I'm try to decrypt a file by gpg and to do this I'm executing (with success) the following command: gpg --passphrase "12345678" --batch --yes --no-symkey-cache filename....
User051209's user avatar
1 vote
1 answer
234 views

How to increase GnuGPG passphrase dialog box timeout?

The GnuGPG passphrase prompt dialog box timesout after 60 seconds. How do I increase the timeout period ? (Just to clarify that I am not looking for default-cache-ttl but the timeout of the passphrase ...
mvanle's user avatar
  • 365
0 votes
0 answers
107 views

Fail to Compile libgcrypt

libgpg-error-1.4.7 did install: $ ls /opt/libgpg-error-1.47 bin include lib share And I tried to configure libgcrypt-1.10.2: $ ./configure --with-libgpg-error-prefix=/opt/libgpg-error-1.47 config....
HCSF's user avatar
  • 213
0 votes
0 answers
34 views

gnupg encrypt not working with other public key

I'm using gnupg package and trying to encrypt and sign the csv file by encrypting other public keys (file receiver public key) and signing with my private key. But the file can't decrypt to other user ...
RMUM's user avatar
  • 1
1 vote
1 answer
121 views

Debian apt, gpg keys and constant overwriting of signed-by

The apt-key has been depreciated. E.g. here they describe how to migrate to gpg keys. Great but it works for a month or so until the sources.list file gets overwritten. Why or how it gets overwritten, ...
atapaka's user avatar
  • 611
0 votes
0 answers
124 views

Run gpg from systemd script

I wrote a wrapper for rsync. It connects to my host and makes a backup of my $HOME directory via ssh. I use gpg-agent for the ssh verification. My script works when called from a terminal emulator. It ...
grbll's user avatar
  • 35
2 votes
0 answers
307 views

How to export only some public sub-keys with gpg?

My PGP-key follows the long-lived-mainkey-short-time-subkeys pattern. Thus I already have 12 expired subkeys attached to my mainkey. When handing out my key today, there seems to be not much reason to ...
kaba's user avatar
  • 151
1 vote
1 answer
3k views

Problem with apt public keys in docker image building

I have problem after upgrading PHP image from 8.0 to PHP image 8.1 and on stackoverflow they sent me there this is my dockerfile: FROM php:8.1-apache AS apache RUN a2enmod rewrite WORKDIR /bin ...
Andrzej Olearka's user avatar
2 votes
1 answer
181 views

Convert encrypted and signed to just signed PGP message

Suppose Bob got a message from Alice encrypted with his public key and signed with her private key. Now he wants to prove to Charlie that he got a message from her with this exact content. The message ...
DumbQuestion's user avatar

1
2 3 4 5
15