Questions tagged [gpg]
gpg is the main command line tool of the GNU Privacy Guard (GnuPG), implementing the OpenPGP standard for public key cryptography. It allows encryption, (verification of) signatures and trust models like the web of trust. gpg (and its library gpgme) are the base of many FOSS crypto applications (like mail user agents). There is a standalone version (1.x) and one (2.x) requiring gpg-agent for secret key handling.
691
questions
0
votes
0
answers
21
views
gnupg encrypt not working with other public key
I'm using gnupg package and trying to encrypt and sign the csv file by encrypting other public keys (file receiver public key) and signing with my private key. But the file can't decrypt to other user ...
- 1
1
vote
1
answer
18
views
Debian apt, gpg keys and constant overwriting of signed-by
The apt-key has been depreciated. E.g. here they describe how to migrate to gpg keys. Great but it works for a month or so until the sources.list file gets overwritten. Why or how it gets overwritten, ...
- 511
0
votes
0
answers
30
views
Run gpg from systemd script
I wrote a wrapper for rsync. It connects to my host and makes a backup of my $HOME directory via ssh. I use gpg-agent for the ssh verification. My script works when called from a terminal emulator. It ...
- 23
1
vote
0
answers
23
views
How to export only some public sub-keys with gpg?
My PGP-key follows the long-lived-mainkey-short-time-subkeys pattern. Thus I already have 12 expired subkeys attached to my mainkey. When handing out my key today, there seems to be not much reason to ...
- 141
0
votes
1
answer
84
views
Problem with apt public keys in docker image building
I have problem after upgrading PHP image from 8.0 to PHP image 8.1 and on stackoverflow they sent me there
this is my dockerfile:
FROM php:8.1-apache AS apache
RUN a2enmod rewrite
WORKDIR /bin
...
2
votes
1
answer
52
views
Convert encrypted and signed to just signed PGP message
Suppose Bob got a message from Alice encrypted with his public key and signed with her private key. Now he wants to prove to Charlie that he got a message from her with this exact content. The message ...
- 23
2
votes
1
answer
54
views
Failed import of gpg key, gpg: no writable keyring found: Not Found
When I tried to import a gpg key in exported_key on a new computer with:
user@computer:~$ gpg --import exported_key
It returned :
gpg: no writable keyring found: Not found ...
- 131
0
votes
0
answers
33
views
Trying to add ppa repository to Debian fails with GPG error
I would like to install the package sile on Debian. It is available on Ubuntu as a PPA. I located the url and added it to my sources.list file. Then I updated. However sile was not downloadable due to ...
- 1
0
votes
0
answers
41
views
Duplicity encrypting to a strange key?
I'm trying to get duplicity working with gpg keys, but it's behaving a bit strange (on the actual machine that I want backed up, it seems better in virtual machines). Here's a complete set of commands ...
0
votes
0
answers
45
views
How to move GPG key to a different host? Errors on import
I am trying to move my GPG configuration from home to work PC. This is how I exported my keys:
sms@home-sms:~/Public$ gpg --list-keys
/home/sms/.gnupg/pubring.kbx
----------------------------
pub ...
- 101
0
votes
0
answers
49
views
issue to authenticate iso file
I downloaded an iso from alt.fedoraproject.org:
https://download.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/iso/Fedora-Everything-netinst-x86_64-38-1.6.iso
then the checksum and ...
- 103
0
votes
0
answers
120
views
gpg to import keys from a keyserver into a file
Following up on How to import keys from a keyserver using gpg in debian?, which asked for importing keys from a keyserver using gpg into our own ~/.gnupg/pubring.kbx file,
but my question is asking ...
- 1,232
1
vote
1
answer
137
views
What is [AR] for gpg / gnupg authentication keys?
I used Dr Duh's yubikey setup about 20 days ago with no issue. I ran through it again last night on an M1 Mac with Brew and when we created the expiring authentication key, the keylist shows [AR] for ...
- 69
0
votes
0
answers
8
views
backing up gpg media choice?
I am finally doing what I should have does years ago and producing a paper and digital backup of my keys. The question is about the preferred media. I have had usb thumb drives go bad but never had ...
- 773
0
votes
0
answers
138
views
gpg not prompting a password for file decryption
I can encrypt a file with gpg 2.3.8, (not using keys), but I can't decrypt it.
[user@test ~]$ gpg -c tarredzip.tar.gz
That prompts for a password (I'm just using "test", so I get a warning ...
0
votes
0
answers
27
views
Swap out Yubikey with working one and signing git commit
I have a Yubikey 5C Nano that is replacing a Yubikey 4C Nano that all of a sudden stopped working. I want to sign my git commits with it. The 5C was set up on an Ubuntu Linux machine, and signs git ...
- 101
0
votes
1
answer
208
views
gpg cannot resove/connect to keyserver
Environment
OS is Artix Linux 6.0.11
GPG is 2.2.40
libcrypt is 1.10.2
keyserver is any (ubuntu , sks, mit, etc.)
Problem
I wanted to update my system via pacman -Syu and needed to import a key by ...
- 11
0
votes
1
answer
77
views
debian howto disable gpg-agent-browser.socket
On server there is no browser nore gui, so is it possible to disable the gpg-agent-browser.socket ?
On debian 10.13 I can see those files:
/usr/lib/systemd/user/gpg-agent.socket
/usr/lib/systemd/user/...
1
vote
0
answers
96
views
GPG fails to decrypt file with Yubikey private key: No secret key
I'm trying to decrypt a file using GPG. The private key is stored on my Yubikey, but I get the following message from GPG:
shell> gpg --output test-temp --decrypt git-token.gpg
gpg: encrypted with ...
- 11
0
votes
1
answer
81
views
apt-key: gpg: conversmon from '�t�-8' to &UTF-8' not evailable
If i run sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 1655A0AB68576280
i get gpg: conversmon from '�t�-8' to &UTF-8' not evailable. segmentation fault
(This is the original ...
- 11
3
votes
2
answers
4k
views
Can't upgrade Jenkins on Debian11, the public key is not available: NO_PUBKEY FCEF32E745F2C3D5
I try to upgrade jenkins.
I use the new way to use gpg keys:
wget https://pkg.jenkins.io/debian-stable/jenkins.io.key
gpg --dearmor jenkins.io.key
mv jenkins.io.key.gpg /usr/share/keyrings/jenkins-...
0
votes
1
answer
4k
views
Solving gpg: decryption failed: No secret key
I have encrypted a file through gpg ***.gpg --encrypt --recipient [email protected] ***
The hard disk with my Linux system where such file was encrypted has dead. I keep just the ***.gpg file in an ...
- 125
0
votes
0
answers
264
views
Issues with yum/dnf update and GPG check
When attempting to update my system/install new packages, I receive this error:
Problem opening package gstreamer1-plugins-bad-1.16.1-5.el8.x86_64.rpm
Problem opening package gstreamer1-plugins-ugly-1....
- 1
1
vote
1
answer
150
views
Accidentally deleted ~/.gnupg directory, Now couldn't get passwords with pass. Is it recoverable?
As title said, I accidentally deleted ~/.gnupg directory.
$ pass odysee
gpg: decryption failed: No secret key
I just want to access my password stored with pass.
Is it recoverable from this state?, ...
- 500
5
votes
1
answer
2k
views
repo.skype.com/deb/dists/stable/InRelease: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION
The following warning message appears during my apt-get update && apt-get upgrade procedure on Linux Mint 21:
W: https://repo.skype.com/deb/dists/stable/InRelease: Key is stored in legacy ...
- 27.8k
1
vote
1
answer
444
views
How to use a GPG key for SSH on macOS
Basically, my goal is to use a single key for everything. I have a GPG key that I imported onto my MacBook, and would like to use that key for SSH authentication. However, despite my several attempts, ...
1
vote
0
answers
54
views
How to remove authentication with gpg-agent/git-credentialmanager to pus to a public repo?
I have a azure devops repository which I have made public recently. Before it was private and I used the git credential manager and gpg-agent.
If I want to push my changes I will get the error:
$ git ...
- 11
0
votes
1
answer
304
views
GPG is missing secret key that is expected to be on an OpenPGP card (YubiKey 5)
Hoping the answer https://unix.stackexchange.com/a/613772/320598 will help, I found out that it did not After asking this question, I found a very similar question at https://stackoverflow.com/q/...
- 1,104
0
votes
0
answers
59
views
Slackware failed to load libcrypt.so.1 and slackpkg broken
Hello fellow Linux users,
I recently installed Slackware64-15.0 to a VM to try it out. I recently came across an error with running slapt-get after installing it. The program is complaining of a ...
1
vote
1
answer
217
views
Linux Mint: How to prevent Slack from re-inserting its key to apt-key
Since apt-key is now deprecated, I have exported and copied all of my package keys to the gpg folder and updated the corresponding /sources.list.d/* accordingly by adding the [signed-by=/usr/share/...
- 133
0
votes
0
answers
94
views
Microsoft public repository rpm downloads failed with gpgcheck enabled with reposync
I’m facing an issue to download the patches (rpm) from Microsoft public repository site with gpgcheck=1.
Repository site: https://packages.microsoft.com/rhel/7/prod/
To download all rpm I have ...
0
votes
0
answers
447
views
Pinentry-tty works with gpg but doesn't work with ssh/git
I have gpg-agent running by systemd unit with the following config:
❯ cat ~/.gnupg/gpg-agent.conf
enable-ssh-support
grab
default-cache-ttl 21600
default-cache-ttl-ssh 21600
pinentry-program /nix/...
- 133
0
votes
1
answer
82
views
EasyPG always asks to pick a gpg key even though epa-file-encrypt-to is set
I want emacs to use one specific key for encryption files. So, when I make a *.org.gpg file and save it, easypg should automatically transparently take the key and encrypt a buffer.
Instead, it asks ...
- 11
1
vote
1
answer
2k
views
Add the gpg key used to sign the packages by running the following wget | gpg | tee >/dev/null command
I was preparing my Kali Linux to run a Tor's Middle Relay. I was doing Tor Project's Repository configuration according to this site.
I made steps 1 and 2. The 3rd step was to add the gpg key used to ...
- 249
0
votes
0
answers
290
views
gpg: signing failed: No secret key when running under Jenkins
I am signing my files with the following command
sudo gpg --pinentry-mode loopback --passphrase-file /srv/mypassphrase --homedir /var/lib/jenkins/.gnupg --sign -r [email protected] -o myfile.sig myfile.tar
...
- 3,195
1
vote
0
answers
197
views
How to enable gpg password prompt for OAuth2 token in mutt
I am using mutt with outlook365 which has OAuth2 support.
I generated an access token which is checked by the following lines in my muttrc:
set imap_authenticators = "xoauth2"
set ...
- 11
2
votes
1
answer
487
views
Installing MS SQL Server on Debian 11 -- Repo Signature Problem
trying install MS SQL Server 2022 on Debian 11 is driving me crazy, as I'm not being able to add MS repo properly.
First of all, step-by-step guide by Microsoft -just for Ubuntu- in this page: https://...
- 21
0
votes
0
answers
49
views
How to generate keygrip for existing private/public keypair
I am trying to generate gpg key using existing private/public keypair (generated elsewhere with certificates so cannot change it).
For this tried option 13 in gpg --expert --full-generate-key command ...
1
vote
2
answers
2k
views
Suddenly a server refuses to 'apt update' because an 'Unknown error executing apt-key'
The problem
UPDATE: Currently investigating with strace. It seems problem is a HTTP 400 error when accessing the repository
UPDATE2: More weird errors in the server (a .so lib file corrupted, database ...
- 121
0
votes
1
answer
78
views
Determine if the gpg-agent cached credentials are still valid
In a shell script I would like to check if the gpg-agent has valid cached credentials or not. How can I do this?
- 733
8
votes
2
answers
2k
views
How do I get git to use the cli rather than some GUI application when asking for GPG password?
Whenever I try to create a signed git commit, I need to enter my GPG key. It spawns some GUI application to receive the password. It looked like the application was seahorse, so I uninstalled it, but ...
- 211
1
vote
2
answers
719
views
Batch move apt keys from trusted.gpg to folder, then add [signed-by=...] as needed
There's been this annoying deprecation of /etc/apt/trusted.gpg, even though putting the keys into trusted.gpg.d/ (which suppresses apt update warnings) doesn't actually help with security at all (for ...
- 564
0
votes
1
answer
657
views
Use Inotifywait to handle multiple files at the same time
I'm scripting a special program to my company.
By using Inotifywait from inotify-tools, I'm watching a specific folder for new items, and as soon a new file appears, it will be encrypted with gpg and ...
3
votes
1
answer
1k
views
gpg --list-secret-keys won't list keys
I've copied .gnupg from machine A to B.
Now on the machine B gpg --list-keys lists my key but gpg --list-secret-key won't unlike on machine A.
- 33
0
votes
1
answer
73
views
How does bashrc function differently from bash_profile?
I have been losing my mind due to IntelliJ not wanting to commit my code. I had put export GPG_TTY=$(tty) into my .bash_profile instead of my .bashrc; echoing $GPG_TTY responded with the proper path, ...
- 1,835
1
vote
1
answer
1k
views
How to specify AES-256 algorithm when creating GPG key?
Pardon me if this is not possible. My goal is to utilise pass. From the conducted research, it appears that the pass command utility will require a GPG key before you can store your sensitive data.
...
- 13
1
vote
0
answers
1k
views
How to create gpg key without passphrase?
I have debain 11 ARM64 in qemu and want to generate PGP key.
The following command
gpg --passphrase '' --full-generate-key
Doesn't work : gpg asking for passphrase over and over again. I need to ...
0
votes
1
answer
237
views
How to install standalone gpgv signature verification tool
How do I install gpgv, the stripped-down version of gpg (and one of the helper tools)? I'm looking for a solution that I can use on Photon OS containers, without installing the full gpg.
I know that ...
- 429
0
votes
1
answer
359
views
How do I access my passwords from `pass` from another computer without transferring private GPG keys?
I recently learned about pass git integration, which allows to sync my passwords with a remote git repo. Which I instantly didn't hesitate to configure.
So then I decided to clone this repo on another ...
2
votes
1
answer
1k
views
Aptly : "gpg: no default secret key", but key isn't expired
I have good not expired gpg secret key but when I run
aptly -architectures=all publish repo product
Warning: publishing from empty source, architectures list should be complete, it can't be changed ...
- 21