Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [gpg]

gpg is the main command line tool of the GNU Privacy Guard (GnuPG), implementing the OpenPGP standard for public key cryptography. It allows encryption, (verification of) signatures and trust models like the web of trust. gpg (and its library gpgme) are the base of many FOSS crypto applications (...

0
votes
0answers
20 views

apt-key fails when key server does not include protocol and port

I am trying to run an install script for Gazebo, which first tries to get the gpg key from keyserver.ubuntu.com. This fails with the following message: gpg: keyserver receive failed: Server indicated ...
-1
votes
0answers
30 views

“apt update” error on GPG signatures for archive.canonical.com repository

Background I'm running a Dell XPS with Ubuntu LTS 18.01 (Bionic) Objective Run sudo apt update to update my packages Problem I get the following error: ... Ign:12 http://archive.canonical.com ...
0
votes
0answers
13 views

gpg-agent fails in mysterious way

I start gpg-agent.service with option --homedir to use my authen subkey, restart on-failure, gpg-agent work well, but if when I do push/pull/clone on remote repo, when gpg's asking for passphrase with ...
0
votes
0answers
6 views

GPG: multiple [A] subkey services

In case I have two git public repo like gitlab, github and each using different gpg authen subkey. I'd like to have two systemd user level service gpg-agent that cache passpharse of each subkey, the ...
0
votes
0answers
7 views

GPG: [E] subkey's public key is the same as master's public key?

I import [E] subkey to different folder from ~/.gnupg, and export subkey's public key with --homedir option. I can see subkey's public key has less lines than master's plublic, using diff results ...
0
votes
0answers
16 views

Sharing a Tomb with several GPG keys

In the documentation for Tomb http://manpages.ubuntu.com/manpages/bionic/man1/tomb.1.html#share%20a%20tomb it is stated that it is possible to share a Tomb between several users - but it is not very ...
2
votes
2answers
43 views

Edit GnuPG encrypted file with no graphic interface

I am trying to edit an encrypted file remotely, with no X-forwarding. Locally, when I launch: emacs myfile.gpg A pop-up window opens in which I enter my passphrase. I'd like to have something ...
0
votes
0answers
24 views

OpenGPG for collaborative file sharing?

We are trying to create a system where our employees can access are shared encrypted file over a VPN and make edits to it. The file's contents are sensitive, so we want to make it as secure as ...
0
votes
1answer
46 views

How to export a GPG private key and public key to file

I have generated keys using GPG, by executing following command gpg2 --gen-key. However i need to export key pair to a file. ie private and public key to private.pgp and public.pgp respectively
-1
votes
0answers
11 views

<gpg: keyserver receive failed: Server indicated a failure> [duplicate]

on kali whaen i want to install tor service i type a code about gpg thing it says gpg: keyserver receive failed: Server indicated a failure
0
votes
1answer
42 views

gpg2 and git signing

I have a problem with gpg2 and signing my commits in git. I should preface all this by saying this all worked yesterday before I did an apt-get update && apt-get upgrade and a reboot. Now ...
0
votes
0answers
29 views

gpg-agent enforce key order with multiple ssh keys

I have two SSH keys (one GPG key with the authentication capability on a smartcard and one standard ssh key). When I try to to connect to a server that accepts both keys, gpg-agent wants to use the ...
0
votes
1answer
46 views

www-data user cannot generate gpg key

I am trying to set up passbolt on a Debian 9 KVM guest, and one of the steps is to generate a GPG key as the www-data user. Unfortunately, whenever I try to do this (by running gpg --gen-key as the ...
2
votes
1answer
47 views

Where does GPG Agent store the passphrase — I need to restore it

I forgot my GPG key passphrase. I know my computer is storing it somewhere because I decrypt strings with it, without a password, for example: $ gpg --decrypt -r me@example.com ~/.password-store/...
0
votes
1answer
36 views

GPG Lost Secret Key

Earlier on today I decided to backup my laptop and re-install everything. I thought I backed up the GPG keys correctly but it turns out I only exported my public key. I understand that I can't get ...
0
votes
1answer
34 views

How to detach-sign a file with a specific private key? || Why this fails?

I have a .tar.xz file which I would like to detach-sign using my gpg private key. The problem is, I have multiple of private keys imported to my keyring and need to choose, which one to use. ...
4
votes
1answer
45 views

How do I distrust an Apt key in Debian Linux?

How do I distrust an Apt key in Debian Linux, or prevent one from being silently added via apt-key (like most commercial packages tend to do in their postinst scripts)? If I run apt-key adv --edit-...
-1
votes
1answer
16 views

GPG cache options don't work

There is an option named default-cache-ttl that controls how long the agent will remember the password to the private key. However, when I put it in the config file it doesn't work - instead, gpg ...
0
votes
1answer
46 views

gpg-agent is running, but I'm always prompted for password

When I run gpg2, I'm prompted for a password every time I use it. Based on my reading of the gpg-agent man pages, I should only be prompted the first time. gpg-agent is a daemon to manage secret (...
0
votes
1answer
181 views

gpg: keyserver receive failed: Address family not supported by protocol

System: Linux Mint 19 Cinnamon, based on Ubuntu 18.04. Upon my limited knowledge of gpg, which version I will state here for future references: gpg (GnuPG) 2.2.4 libgcrypt 1.8.1 I thought the ...
0
votes
1answer
86 views

dpkg-source: warning: failed to verify signature

System: Linux Mint 19 Cinnamon, based on Ubuntu 18.04. In this answer, I am being pointed at a different solution, other than installing directly from source. Since I haven't ever used dget, I must ...
1
vote
1answer
51 views

SUSE Linux Signature verification failed

When I code, build and sign .rpm file for SUSE Linux, it is signed successfully as follows: rpm --checksig -v xxx.rpm Header V4 RSA/SHA256 Signature, key ID 7936b039: OK Header SHA1 digest: OK ...
0
votes
1answer
52 views

How to make `tty` work in .bash_profile

I have the following in my ~/.bash_profile in order to try to make GPG work nicely: export GPG_TTY="`tty`" But when I open a new shell, I get the following: $ echo $GPG_TTY not a tty However, if ...
0
votes
0answers
59 views

GPG2 No Longer Caching

This just started happening a couple of days ago on Fedora 28. I want GPG to remember my private key passphrase so I can decrypt files without entering the passphrase every time. If I run gpg2 to ...
4
votes
0answers
36 views

How can I see queries to gpg-agent?

I am using gpg-agent together with a Yubikey to securely store my GPG keys. In addition I've enabled so that whenever a authentication, sign or decryption request happens I must physically push the ...
4
votes
1answer
112 views

Security of bash script involving gpg symmetric encryption

Notice: the very same vulnerability has been discussed in this question, but the different setting of the problem (in my case I don't need to store the passphrase) allows for a different solution (i.e....
0
votes
0answers
54 views

cannot move imported SSH key to yubikey

I am using my RSA key to access some servers via SSH, and I would like to move it to my new yubikey and keep using it. I had successfully imported the key into gpg following the advices from THIS post,...
0
votes
1answer
237 views

How do I get the fingerprint of an ASCII-armored PGP secret key with gpg?

I have a file secret.asc containing an ASCII-armored (i.e., plain text and starts with -----BEGIN PGP PRIVATE KEY BLOCK-----) PGP/GPG secret/private key, and I would like to know its 40-character key ...
2
votes
0answers
108 views

yum update shows three exclamation marks

yum update Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile gitlab_gitlab-ce/x86_64/signature | 836 B 00:00:00 gitlab_gitlab-ce/x86_64/signature | ...
2
votes
1answer
49 views

How can a public key contain several public keys with GPG (or what am I doing wrong)?

I'm setting up some Ubuntu servers. I received from another sysadmin a key to be added (call it somekey.pub) for apt package verification on in-house packages. Adding this key with apt-key add ...
1
vote
0answers
122 views

How do I verify linux kernel signature with gpg?

Following the notes at the kernel.org site, but I cannot seem to verify the signature of the kernel. I tried to use the given script to handle it for me, but that has failed too. user@localhost ~ $ ...
0
votes
0answers
46 views

Claws Mail gpg uid

I have a gnupg keyring with three uids. When sending an email using Claws Mail the default identity (myself1@firstmail.com) is always used to sign the mail regardless of the mail account used to send ...
1
vote
0answers
17 views

Backing up GnuPG

I am not sure how to securly backup my .gnupg folder or to be specific my private key. I googled and found that people recommended just copying the whole .gnupg folder. Is there a safer way to Backup ...
0
votes
0answers
24 views

gpg batch: created an empty secring file

I'm using the following command to generate a gpg key #!/bin/bash cat > /tmp/gpg.txt << EOF %echo Generating a basic OpenPGP key Key-Type: DSA Key-Length: 1024 Subkey-Type: ELG-E Subkey-...
1
vote
1answer
68 views

How do I verify https://files.devuan.org/devuan-devs.gpg

I am running Devuan Jessie. I want to install another Devuan Ascii from scratch. So I downloaded: https://files.devuan.org/devuan_ascii/installer-iso/devuan_ascii_2.0.0_amd64_netinst.iso https://...
0
votes
1answer
32 views

Why does rpmfusion recommend the nogpgcheck switch?

See the commandline RHEL/CentOS section at https://rpmfusion.org/Configuration/ Doesn't this --nogpgcheck switch allow for tampering to happen unnoticed?
0
votes
1answer
44 views

Does gpg-agent have a GUI?

Is there a GUI of application gpg-agent ? How I can start it ? I need to change some settings there, but can't find it.
1
vote
1answer
1k views

How to solve gpg: bad data signature from key: KEY_ID Wrong key usage (0x19, 0x2)

I'm using Arch Linux Linux uplink 4.14.56-1-lts #1 SMP Tue Jul 17 20:11:42 CEST 2018 x86_64 GNU/Linux. I'm trying to solve a problem I'm currently have with GnuPG 2.2.9 (libgcrypt 1.8.3), but I've ...
4
votes
1answer
2k views

gpg: WARNING: unsafe ownership on homedir '/home/user/.gnupg'

System: I am testing Linux Mint 19 Beta based on Ubuntu 18.04. I got this warning while installing an unrelated package: gpg: WARNING: unsafe ownership on homedir '/home/vlastimil/.gnupg' This is ...
2
votes
1answer
296 views

Can I use kwallet to manage PGP keys?

I have two PGP keys I use to sign and decrypt e-mails in kmail. When doing so, I have to enter the key's password (currently stored in KeePass). Is it possible to save the passwords in my kwallet in ...
1
vote
1answer
158 views

KEYEXPIRED on Opensuse repository

Running Ubuntu 16.04.4 LTS. On running sudo apt update, the final lines are as follows: W: GPG error: http://download.opensuse.org/repositories/home:/osmc/xUbuntu_16.04 Release: The following ...
0
votes
1answer
244 views

GPG error in Debian Lenny

I got error after aptitude update command: Err http://archive.debian.org lenny/non-fre Packages 404 Not Found [IP: 209.87....
0
votes
0answers
176 views

Webmin MongoDB Repository update fail!

My server OS: Linux/CentOS 7.5 Webmin version: 1.881 This is all (error) message content: Dependencies Resolved ================================================================================ ...
1
vote
1answer
40 views

GPG seems to alter imported keys

So I've never used gpg (2.0.14) before this week and I'm no cryptography pro, but the results I've been getting with gpg seem odd. When I import keys (e.g. gpg --import public.key) that were ...
0
votes
1answer
536 views

How to export and verify a signed gpg public key?

I signed the public key of bob@example.com with 3 of my identities. I did not use lsign so that the signature is exportable. The signatures are listed properly with gpg --list-signatures bob@example....
2
votes
2answers
2k views

yum install and update fail - GPG keys listed for the “CentOS-7 - Updates” repository are already installed but they are not correct

I'm stumped by this update killing error. This error squashes all updates until I disable gpgcheck on the updates repo. IE /etc/yum.repos.d/CentOS-Base.repo|[updates].gpgcheck=0 It's happening on ...
1
vote
1answer
159 views

GNUHealth installation fails

Today trying to install GNUHealth on my Fedora 27 (32bit). after creating user I tried to verify PostgreSQL. here's a file pg_hba.conf in /var/lib/pgsql/data. This shows following lines In this file ...
0
votes
1answer
30 views

GPG keeps prompting for the passpharse

I've setup my GPG keys by importing them form my keybase.io, then extracted ssh keys and everything seems to work, but one thing I can't figure out is that it prompts me for passphrase every single ...
1
vote
0answers
223 views

gpg reports “operation cancelled”

I am trying to encrypt a file using GPG. I am new to GPG. It's installed at version 2.0.22 on RHEL 7.4. Whenever I try to run it, I get an error that the operation was cancelled by user. sh-4.2$ gpg ...
2
votes
0answers
43 views

Why does gpg --card-status require dbus to be restarted?

When I log in with my (usb) yubikey 4 inserted, I can run gpg --card-status and it gives the expected result. If I remove the yubikey and run gpg --card-status it, correctly, tells me that there is no ...