Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [gpg]

gpg is the main command line tool of the GNU Privacy Guard (GnuPG), implementing the OpenPGP standard for public key cryptography. It allows encryption, (verification of) signatures and trust models like the web of trust. gpg (and its library gpgme) are the base of many FOSS crypto applications (like mail user agents). There is a standalone version (1.x) and one (2.x) requiring gpg-agent for secret key handling.

-1
votes
0answers
7 views

Synchronise passwords across devices with pass

I am looking for a simple, open-source password manager for linux with a CLI. It has to have a way of retrieving a password via the command line, so I can use it in several scripts (that sync my email ...
-1
votes
0answers
14 views

Can't add any repository in DEEPIN OS no valid OpenPGP data found

today I downloaded DEEPIN OS to test it out. So far so good but I'm having trouble adding any repository in this OS. For the sake of this example I'm trying to add FLATPAK repository as shown in image ...
0
votes
1answer
42 views

Why does gpg fail to fetch key stubs from my smart card?

I recently got a Yubikey and loaded keys onto it following the directions here. gpg successfully reads and writes to the card, and I can see the key fingerprints from it it. However, when I try to use ...
1
vote
2answers
35 views

gpg - gpg-preset-passphrase installation

Issue: - The passphrase is repeatedly being requested when I pass show <name of credential>. Doing some Googling, I found you can do that with gpg-preset-passphrase, however I'm not sure where ...
1
vote
0answers
27 views

How to create password encrypted backup with gpg

Recently, I made a script that archives important files with gzip, encrypts them with gpg, using gpg --symmetric (which prompts me for a password), then uploads it. I was testing the backup on ...
0
votes
0answers
13 views

Create private ppa with ubuntu tutorial dont work

i tried to create a private ppa with this tutorial. Anything seems to work, but after i executed apt update i got the following error message: GPG error: http://ppa.xyz/bionic/stable/main/binary ...
1
vote
1answer
81 views

How to correctly change the passphrase of GPG's secret key?

I'm trying to change the passphrase of my GPG's secret key. I actually changed it using seahorse (Also tried gpg --edit-keys and passwd, but when I tried to export my private key it asks me for two ...
2
votes
1answer
71 views

which part is the fingerprint in gpg public key

I am using gpg - $ gpg --version gpg (GnuPG) 2.2.12 libgcrypt 1.8.4 Am a newbie and hence trying to understand the difference between the two commands : $ gpg --list-key and: $ gpg --fingerprint ...
0
votes
1answer
60 views

GNU parallel proper usage in conjunction with tar, xz, gpg

I would like to speed up my archiving operations, I am usually doing 23 GiB (one Blu-Ray) backups. I have found this: How to do large file parallel encryption using GnuPG and GNU parallel? Since I ...
9
votes
1answer
267 views

Equivalent of `rpm -K` using `apt`

What is the apt equivalent of rpm -K *.rpm, where -K is defined as verifying the signature of the repository in man rpm and in Maximum RPM? Example of a situation: sudo rpm --import https://mirrors....
1
vote
0answers
23 views

Gnupg - Passing Decryption To Application

When you decrypt a file with GnuPG with the -d option and the file is in ascii form, it simply scrolls down the screen and can be read. But what if it isn't an ascii file that was encrypted, but say a ...
0
votes
1answer
19 views

GPG Cannot Find Keys

I transferred my keys using unison to another machine. On the other machine, gpg cannot find any keys. $ gpg --list-secret-keys $ list-secret-keys does not output anything. $ ls -lha .gnupg/ total ...
2
votes
0answers
32 views

Renaming trusted.gpg to trusted.gpg-broken

I ran a fresh install of Debian stretch 9.8.0 and all was well. I then ran sudo apt update and I get an output which hits the ftp.debian.stretch server for the update thing is it tells me unable ...
2
votes
2answers
107 views

Decrypting GnuPG-encrypted files

I have some RNA-seq files need to be decrypted. For example 1672_WTSI-OESO_005_w3.tar.gz.gpg Likely I have key for that in same folder 1672_WTSI-OESO_005_w3.gpgkey I have also have a file name ...
0
votes
0answers
47 views

Why does gpg --recv-keys work as root but not as a normal user?

As root: # gpg --recv-keys DF9B9C49EAA9298432589D76DA87E80D6294BE9B gpg: keybox '/root/.gnupg/pubring.kbx' created key DA87E80D6294BE9B: 61 signatures not checked due to missing keys gpg: /root/....
-3
votes
1answer
103 views

gpg: --armor vs --clearsign

gpg has an option --armor, which can generate output in an ASCII-armored format similar to uuencoded documents. It also has an option --clearsign which causes the document to be wrapped in an ASCII-...
3
votes
1answer
428 views

Why doesn't gpg need us to specify which keys for encryption and decryption?

The GNU Privacy Handbook says: The command-line option --sign is used to make a digital signature. The document to sign is input, and the signed document is output. alice% gpg --output doc.sig --...
0
votes
0answers
18 views

How to forward GPG to a linux machine from Windows?

Here is my set up: Windows 10 machine, my desktop PC. Ubuntu 18 machine, this is my home server Yubikey, has my private GPG keys on it My work flow is as follows: Plug in my Yubikey into USB port ...
0
votes
2answers
32 views

How to find out which public key is actually in use and remove deprecated ones (gpg)?

I'm on Linux Mint 19.1 Cinnamon. I have a minor problem with identifying the actual up-to-date GPG public key used by apt-get with Spotify music application. I would like to remove the old - ...
1
vote
1answer
85 views

debsign: no entry data.tar.gz in archive error

I have created a binary deb package with dpkg-deb command. It is installable and works. > dpkg-deb --build /test dpkg-deb: building package `xxx' in `test.deb'. Now I want to sign the package, ...
0
votes
1answer
30 views

gpg decryption of multiple subdirectories

How do I decrypt files that are stored in cascade subdirectories with gpg? Something like a bash script: for file in all_subdirs; do gpg --passphrase passphrase *.gpg
2
votes
1answer
100 views

Encrypting a password using gpg without constantly asking for password

I have a service that checks my email regularly, and I use gpg to encrypt my email password. The problem is that every time I lock my computer or after a certain amount of time gpg shows a graphical ...
1
vote
1answer
178 views

gpg --passphrase-file doesn't work as root?

I'm trying to encrypt our backups using GnuPG as a pipe (reading from stdin and writing to stdout). The passphrase is read from a file. An example command: echo "mysecret" | gpg --passphrase-file ...
0
votes
0answers
123 views

How to resolve following error in decrypting a file?

gpg: AES256 encrypted data gpg: encrypted with 1 passphrase gpg: decryption failed: Bad session key I am doing decryption by ...
0
votes
1answer
146 views

gpg: signing failed: Operation cancelled under tmux?

I have found a strange error. It is OK when I commit using gpg with git under bash or zsh. git commit -S -m "xxx" However when I commit it under tmux, I got: gpg: signing failed: Operation ...
3
votes
1answer
877 views

Importing keys from keyring.debian.org fail

Updating repositories with apt update fails since the public keys of several signatures are not available. $ sudo apt update Get:1 http://security.debian.org/debian-security stretch/updates InRelease ...
3
votes
1answer
130 views

Debian 8 Jessie errors on all MariaDB mirrors : Signature by key 199369E5404BD5FC7D2FE43BCBCB082A1BB943DB uses weak digest algorithm (SHA1)

I've inadvertently stepped into "update hell". I updated a number of dependencies trying to install the Gerbera media server. In the process several existing services stopped running, including ...
0
votes
0answers
9 views

GPG: multiple [A] subkey services

In case I have two git public repo like gitlab, github and each using different gpg authen subkey. I'd like to have two systemd user level service gpg-agent that cache passpharse of each subkey, the ...
0
votes
1answer
101 views

GPG: [E] subkey's public key is the same as master's public key?

I import [E] subkey to different folder from ~/.gnupg, and export subkey's public key with --homedir option. I can see subkey's public key has less lines than master's plublic, using diff results ...
2
votes
2answers
72 views

Edit GnuPG encrypted file with no graphic interface

I am trying to edit an encrypted file remotely, with no X-forwarding. Locally, when I launch: emacs myfile.gpg A pop-up window opens in which I enter my passphrase. I'd like to have something ...
2
votes
1answer
4k views

How to export a GPG private key and public key to file

I have generated keys using GPG, by executing following command gpg2 --gen-key. However i need to export key pair to a file. ie private and public key to private.pgp and public.pgp respectively
0
votes
1answer
186 views

gpg2 and git signing

I have a problem with gpg2 and signing my commits in git. I should preface all this by saying this all worked yesterday before I did an apt-get update && apt-get upgrade and a reboot. Now ...
0
votes
1answer
212 views

www-data user cannot generate gpg key

I am trying to set up passbolt on a Debian 9 KVM guest, and one of the steps is to generate a GPG key as the www-data user. Unfortunately, whenever I try to do this (by running gpg --gen-key as the ...
2
votes
1answer
121 views

Where does GPG Agent store the passphrase — I need to restore it

I forgot my GPG key passphrase. I know my computer is storing it somewhere because I decrypt strings with it, without a password, for example: $ gpg --decrypt -r me@example.com ~/.password-store/...
0
votes
1answer
54 views

GPG Lost Secret Key

Earlier on today I decided to backup my laptop and re-install everything. I thought I backed up the GPG keys correctly but it turns out I only exported my public key. I understand that I can't get ...
0
votes
1answer
177 views

How to detach-sign a file with a specific private key? || Why this fails?

I have a .tar.xz file which I would like to detach-sign using my gpg private key. The problem is, I have multiple of private keys imported to my keyring and need to choose, which one to use. ...
4
votes
1answer
97 views

How do I distrust an Apt key in Debian Linux?

How do I distrust an Apt key in Debian Linux, or prevent one from being silently added via apt-key (like most commercial packages tend to do in their postinst scripts)? If I run apt-key adv --edit-...
-1
votes
1answer
79 views

GPG cache options don't work

There is an option named default-cache-ttl that controls how long the agent will remember the password to the private key. However, when I put it in the config file it doesn't work - instead, gpg ...
0
votes
1answer
243 views

gpg-agent is running, but I'm always prompted for password

When I run gpg2, I'm prompted for a password every time I use it. Based on my reading of the gpg-agent man pages, I should only be prompted the first time. gpg-agent is a daemon to manage secret (...
1
vote
1answer
581 views

gpg: keyserver receive failed: Address family not supported by protocol

System: Linux Mint 19 Cinnamon, based on Ubuntu 18.04. Upon my limited knowledge of gpg, which version I will state here for future references: gpg (GnuPG) 2.2.4 libgcrypt 1.8.1 I thought the ...
0
votes
1answer
288 views

dpkg-source: warning: failed to verify signature

System: Linux Mint 19 Cinnamon, based on Ubuntu 18.04. In this answer, I am being pointed at a different solution, other than installing directly from source. Since I haven't ever used dget, I must ...
1
vote
2answers
190 views

SUSE Linux Signature verification failed

When I code, build and sign .rpm file for SUSE Linux, it is signed successfully as follows: rpm --checksig -v xxx.rpm Header V4 RSA/SHA256 Signature, key ID 7936b039: OK Header SHA1 digest: OK ...
0
votes
1answer
178 views

How to make `tty` work in .bash_profile

I have the following in my ~/.bash_profile in order to try to make GPG work nicely: export GPG_TTY="`tty`" But when I open a new shell, I get the following: $ echo $GPG_TTY not a tty However, if ...
0
votes
0answers
149 views

GPG2 No Longer Caching

This just started happening a couple of days ago on Fedora 28. I want GPG to remember my private key passphrase so I can decrypt files without entering the passphrase every time. If I run gpg2 to ...
4
votes
0answers
42 views

How can I see queries to gpg-agent?

I am using gpg-agent together with a Yubikey to securely store my GPG keys. In addition I've enabled so that whenever a authentication, sign or decryption request happens I must physically push the ...
4
votes
1answer
263 views

Security of bash script involving gpg symmetric encryption

Notice: the very same vulnerability has been discussed in this question, but the different setting of the problem (in my case I don't need to store the passphrase) allows for a different solution (i.e....
1
vote
1answer
817 views

How do I get the fingerprint of an ASCII-armored PGP secret key with gpg?

I have a file secret.asc containing an ASCII-armored (i.e., plain text and starts with -----BEGIN PGP PRIVATE KEY BLOCK-----) PGP/GPG secret/private key, and I would like to know its 40-character key ...
2
votes
1answer
253 views

yum update shows three exclamation marks

yum update Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile gitlab_gitlab-ce/x86_64/signature | 836 B 00:00:00 gitlab_gitlab-ce/x86_64/signature | ...
2
votes
1answer
65 views

How can a public key contain several public keys with GPG (or what am I doing wrong)?

I'm setting up some Ubuntu servers. I received from another sysadmin a key to be added (call it somekey.pub) for apt package verification on in-house packages. Adding this key with apt-key add ...
1
vote
0answers
347 views

How do I verify linux kernel signature with gpg?

Following the notes at the kernel.org site, but I cannot seem to verify the signature of the kernel. I tried to use the given script to handle it for me, but that has failed too. user@localhost ~ $ ...