Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [gpg]

gpg is the main command line tool of the GNU Privacy Guard (GnuPG), implementing the OpenPGP standard for public key cryptography. It allows encryption, (verification of) signatures and trust models like the web of trust. gpg (and its library gpgme) are the base of many FOSS crypto applications (like mail user agents). There is a standalone version (1.x) and one (2.x) requiring gpg-agent for secret key handling.

2
votes
1answer
17 views

Problem with gpg and apt-get update - missing keys?

I do not know how, but I managed to mess up apt-get. Executing sudo su apt-get update I get errors like the following W: http://security.debian.org/dists/stretch/updates/InRelease: The key(s) in ...
0
votes
1answer
95 views

GPG error when I want to apt update

I just installed Kali NetHunter and I'm trying to do a simple apt update but it looks like a public key is missing root@kali:~# apt-get update  0% [Waiting for headers] [Connected to packages....
1
vote
0answers
41 views

SSH server accepts key, but signing fails

I have recently tried migrating from a standard ssh public key setup to managing my keys with GPG. Following instructions on my distribution's wiki, I set up ssh to use gpg-agent instead of the ...
1
vote
0answers
26 views

GPG pinentry, how to show requestor

So I have pinentry popping up whenever I fresh boot my desktop environment (i3), asking for my main GPG main key password. I perhaps configured at some point some program to read some pass entry, but ...
1
vote
0answers
766 views

Manjaro Update fails: signature is unknown trust

I was installing Manjaro GNOME 18.0.4 for my sister. However, when I tried to update all packages using pacman -Syu, the update fails due to two signature errors: dunst package with signature by "...
0
votes
0answers
10 views

GPG Encryption Problem [duplicate]

I think I'm missing something because when I use gpg -c test.txt I'm prompted to put and repeat a password and the test.txt.gpg file appear but if I try to decrypt it gpg test.txt.gpg, It doesn't ask ...
3
votes
2answers
92 views

gpg cannot unlock passphrase-less key: “gpg: public key decryption failed: No passphrase given”

I have a gpg setup started with older gpg versions and I did not use a passphrase back then. I would type enter directly when prompted for it. I'm not sure if that means the key isn't encrypted or if ...
0
votes
1answer
44 views

explanation of RHEL/CentOS 7 yum repo gpg key

I do not understand how one gpg key can work for any of a thousand rpm's downloaded from a repository? For example, in RHEL/Centos 7.x install EPEL (extra packages for enterprise linux); results in /...
-1
votes
1answer
41 views

Clarification on the gpg command (No such file or directory)

I'm facing issues while executing the below command. Saying that No such file or Directory. I checked in the system and there were No such directory exist. gpg: can't open `/root/.secrets/...
0
votes
1answer
27 views

How to encrypt file with gpg and a passphrase only?

I have a file that is decrypted with a similar command: gpg --batch --yes -q -d --passphrase-fd 0 -o "/var/file.out" "/var/file.gpg" < /var/secret.key I want to change the content of the /var/...
0
votes
1answer
25 views

Old index files of repositories

I've deleted some keys from /etc/apt/trusted.gpg and trusted.gpg.d. Then i use apt update and get this message: An error occurred during the signature verification. The repository is not updated ...
0
votes
0answers
32 views

gpg-agent: can't connect to the SCdaemon: IPC connect call failed

syslog is getting filled every 2 seconds with: gpg-agent: can't connect to the SCdaemon: IPC connect call failed When I kill gpg-agent it respawns again. I am not really actively using gpg to ...
1
vote
0answers
91 views

Arch Linux Installation - GPG Errors and Unrecognized Archive Format

I got a Lenovo Thinkpad X1 and have been trying to boot Arch from an ISO that I burned onto a 4 GB USB stick. The ISO image is burned correctly and is not corrupted. The partition created on my SSD ...
1
vote
1answer
30 views

Synchronise passwords across devices with pass

I am looking for a simple, open-source password manager for linux with a CLI. It has to have a way of retrieving a password via the command line, so I can use it in several scripts (that sync my email ...
0
votes
1answer
78 views

Why does gpg fail to fetch key stubs from my smart card?

I recently got a Yubikey and loaded keys onto it following the directions here. gpg successfully reads and writes to the card, and I can see the key fingerprints from it it. However, when I try to use ...
1
vote
2answers
119 views

gpg - gpg-preset-passphrase installation

Issue: - The passphrase is repeatedly being requested when I pass show <name of credential>. Doing some Googling, I found you can do that with gpg-preset-passphrase, however I'm not sure where ...
1
vote
0answers
33 views

How to create password encrypted backup with gpg

Recently, I made a script that archives important files with gzip, encrypts them with gpg, using gpg --symmetric (which prompts me for a password), then uploads it. I was testing the backup on ...
0
votes
0answers
18 views

Create private ppa with ubuntu tutorial dont work

i tried to create a private ppa with this tutorial. Anything seems to work, but after i executed apt update i got the following error message: GPG error: http://ppa.xyz/bionic/stable/main/binary ...
1
vote
1answer
122 views

How to correctly change the passphrase of GPG's secret key?

I'm trying to change the passphrase of my GPG's secret key. I actually changed it using seahorse (Also tried gpg --edit-keys and passwd, but when I tried to export my private key it asks me for two ...
2
votes
1answer
79 views

which part is the fingerprint in gpg public key

I am using gpg - $ gpg --version gpg (GnuPG) 2.2.12 libgcrypt 1.8.4 I am trying to understand the difference between the two commands : $ gpg --list-key and: $ gpg --fingerprint from whatever ...
0
votes
1answer
81 views

GNU parallel proper usage in conjunction with tar, xz, gpg

I would like to speed up my archiving operations, I am usually doing 23 GiB (one Blu-Ray) backups. I have found this: How to do large file parallel encryption using GnuPG and GNU parallel? Since I ...
9
votes
1answer
282 views

Equivalent of `rpm -K` using `apt`

What is the apt equivalent of rpm -K *.rpm, where -K is defined as verifying the signature of the repository in man rpm and in Maximum RPM? Example of a situation: sudo rpm --import https://mirrors....
1
vote
0answers
25 views

Gnupg - Passing Decryption To Application

When you decrypt a file with GnuPG with the -d option and the file is in ascii form, it simply scrolls down the screen and can be read. But what if it isn't an ascii file that was encrypted, but say a ...
0
votes
1answer
25 views

GPG Cannot Find Keys

I transferred my keys using unison to another machine. On the other machine, gpg cannot find any keys. $ gpg --list-secret-keys $ list-secret-keys does not output anything. $ ls -lha .gnupg/ total ...
2
votes
0answers
49 views

Renaming trusted.gpg to trusted.gpg-broken

I ran a fresh install of Debian stretch 9.8.0 and all was well. I then ran sudo apt update and I get an output which hits the ftp.debian.stretch server for the update thing is it tells me unable ...
2
votes
2answers
151 views

Decrypting GnuPG-encrypted files

I have some RNA-seq files need to be decrypted. For example 1672_WTSI-OESO_005_w3.tar.gz.gpg Likely I have key for that in same folder 1672_WTSI-OESO_005_w3.gpgkey I have also have a file name ...
0
votes
0answers
85 views

Why does gpg --recv-keys work as root but not as a normal user?

As root: # gpg --recv-keys DF9B9C49EAA9298432589D76DA87E80D6294BE9B gpg: keybox '/root/.gnupg/pubring.kbx' created key DA87E80D6294BE9B: 61 signatures not checked due to missing keys gpg: /root/....
-3
votes
1answer
160 views

gpg: --armor vs --clearsign

gpg has an option --armor, which can generate output in an ASCII-armored format similar to uuencoded documents. It also has an option --clearsign which causes the document to be wrapped in an ASCII-...
2
votes
1answer
562 views

Why doesn't gpg need us to specify which keys for encryption and decryption?

The GNU Privacy Handbook says: The command-line option --sign is used to make a digital signature. The document to sign is input, and the signed document is output. alice% gpg --output doc.sig --...
0
votes
0answers
29 views

How to forward GPG to a linux machine from Windows?

Here is my set up: Windows 10 machine, my desktop PC. Ubuntu 18 machine, this is my home server Yubikey, has my private GPG keys on it My work flow is as follows: Plug in my Yubikey into USB port ...
0
votes
2answers
37 views

How to find out which public key is actually in use and remove deprecated ones (gpg)?

I'm on Linux Mint 19.1 Cinnamon. I have a minor problem with identifying the actual up-to-date GPG public key used by apt-get with Spotify music application. I would like to remove the old - ...
1
vote
1answer
133 views

debsign: no entry data.tar.gz in archive error

I have created a binary deb package with dpkg-deb command. It is installable and works. > dpkg-deb --build /test dpkg-deb: building package `xxx' in `test.deb'. Now I want to sign the package, ...
0
votes
1answer
34 views

gpg decryption of multiple subdirectories

How do I decrypt files that are stored in cascade subdirectories with gpg? Something like a bash script: for file in all_subdirs; do gpg --passphrase passphrase *.gpg
2
votes
1answer
190 views

Encrypting a password using gpg without constantly asking for password

I have a service that checks my email regularly, and I use gpg to encrypt my email password. The problem is that every time I lock my computer or after a certain amount of time gpg shows a graphical ...
1
vote
1answer
282 views

gpg --passphrase-file doesn't work as root?

I'm trying to encrypt our backups using GnuPG as a pipe (reading from stdin and writing to stdout). The passphrase is read from a file. An example command: echo "mysecret" | gpg --passphrase-file ...
0
votes
0answers
215 views

How to resolve following error in decrypting a file?

gpg: AES256 encrypted data gpg: encrypted with 1 passphrase gpg: decryption failed: Bad session key I am doing decryption by ...
1
vote
1answer
222 views

gpg: signing failed: Operation cancelled under tmux?

I have found a strange error. It is OK when I commit using gpg with git under bash or zsh. git commit -S -m "xxx" However when I commit it under tmux, I got: gpg: signing failed: Operation ...
3
votes
1answer
1k views

Importing keys from keyring.debian.org fail

Updating repositories with apt update fails since the public keys of several signatures are not available. $ sudo apt update Get:1 http://security.debian.org/debian-security stretch/updates InRelease ...
3
votes
1answer
175 views

Debian 8 Jessie errors on all MariaDB mirrors : Signature by key 199369E5404BD5FC7D2FE43BCBCB082A1BB943DB uses weak digest algorithm (SHA1)

I've inadvertently stepped into "update hell". I updated a number of dependencies trying to install the Gerbera media server. In the process several existing services stopped running, including ...
0
votes
0answers
10 views

GPG: multiple [A] subkey services

In case I have two git public repo like gitlab, github and each using different gpg authen subkey. I'd like to have two systemd user level service gpg-agent that cache passpharse of each subkey, the ...
0
votes
1answer
153 views

GPG: [E] subkey's public key is the same as master's public key?

I import [E] subkey to different folder from ~/.gnupg, and export subkey's public key with --homedir option. I can see subkey's public key has less lines than master's plublic, using diff results ...
2
votes
2answers
116 views

Edit GnuPG encrypted file with no graphic interface

I am trying to edit an encrypted file remotely, with no X-forwarding. Locally, when I launch: emacs myfile.gpg A pop-up window opens in which I enter my passphrase. I'd like to have something ...
4
votes
2answers
7k views

How to export a GPG private key and public key to file

I have generated keys using GPG, by executing following command gpg2 --gen-key. However i need to export key pair to a file. ie private and public key to private.pgp and public.pgp respectively
0
votes
1answer
232 views

gpg2 and git signing

I have a problem with gpg2 and signing my commits in git. I should preface all this by saying this all worked yesterday before I did an apt-get update && apt-get upgrade and a reboot. Now ...
0
votes
1answer
289 views

www-data user cannot generate gpg key

I am trying to set up passbolt on a Debian 9 KVM guest, and one of the steps is to generate a GPG key as the www-data user. Unfortunately, whenever I try to do this (by running gpg --gen-key as the ...
2
votes
1answer
168 views

Where does GPG Agent store the passphrase — I need to restore it

I forgot my GPG key passphrase. I know my computer is storing it somewhere because I decrypt strings with it, without a password, for example: $ gpg --decrypt -r me@example.com ~/.password-store/...
0
votes
1answer
59 views

GPG Lost Secret Key

Earlier on today I decided to backup my laptop and re-install everything. I thought I backed up the GPG keys correctly but it turns out I only exported my public key. I understand that I can't get ...
0
votes
1answer
274 views

How to detach-sign a file with a specific private key? || Why this fails?

I have a .tar.xz file which I would like to detach-sign using my gpg private key. The problem is, I have multiple of private keys imported to my keyring and need to choose, which one to use. ...
4
votes
1answer
113 views

How do I distrust an Apt key in Debian Linux?

How do I distrust an Apt key in Debian Linux, or prevent one from being silently added via apt-key (like most commercial packages tend to do in their postinst scripts)? If I run apt-key adv --edit-...
-1
votes
1answer
142 views

GPG cache options don't work

There is an option named default-cache-ttl that controls how long the agent will remember the password to the private key. However, when I put it in the config file it doesn't work - instead, gpg ...