Questions tagged [gpg-agent]
The gpg-agent tag has no usage guidance.
0
votes
0answers
13 views
gpg-agent fails in mysterious way
I start gpg-agent.service with option --homedir to use my authen subkey, restart on-failure, gpg-agent work well, but if when I do push/pull/clone on remote repo, when gpg's asking for passphrase with ...
0
votes
0answers
6 views
GPG: multiple [A] subkey services
In case I have two git public repo like gitlab, github and each using different gpg authen subkey.
I'd like to have two systemd user level service gpg-agent that cache passpharse of each subkey, the ...
0
votes
0answers
29 views
gpg-agent enforce key order with multiple ssh keys
I have two SSH keys (one GPG key with the authentication capability on a smartcard and one standard ssh key). When I try to to connect to a server that accepts both keys, gpg-agent wants to use the ...
2
votes
1answer
47 views
Where does GPG Agent store the passphrase — I need to restore it
I forgot my GPG key passphrase.
I know my computer is storing it somewhere because I decrypt strings with it, without a password, for example:
$ gpg --decrypt -r me@example.com ~/.password-store/...
-1
votes
1answer
16 views
GPG cache options don't work
There is an option named default-cache-ttl that controls how long the agent will remember the password to the private key. However, when I put it in the config file it doesn't work - instead, gpg ...
0
votes
1answer
46 views
gpg-agent is running, but I'm always prompted for password
When I run gpg2, I'm prompted for a password every time I use it.
Based on my reading of the gpg-agent man pages, I should only be
prompted the first time.
gpg-agent is a daemon to manage secret (...
0
votes
0answers
59 views
GPG2 No Longer Caching
This just started happening a couple of days ago on Fedora 28. I want GPG to remember my private key passphrase so I can decrypt files without entering the passphrase every time.
If I run gpg2 to ...
4
votes
0answers
36 views
How can I see queries to gpg-agent?
I am using gpg-agent together with a Yubikey to securely store my GPG keys. In addition I've enabled so that whenever a authentication, sign or decryption request happens I must physically push the ...
1
vote
1answer
1k views
How to solve gpg: bad data signature from key: KEY_ID Wrong key usage (0x19, 0x2)
I'm using Arch Linux Linux uplink 4.14.56-1-lts #1 SMP Tue Jul 17 20:11:42 CEST 2018 x86_64 GNU/Linux. I'm trying to solve a problem I'm currently have with GnuPG 2.2.9 (libgcrypt 1.8.3), but I've ...
1
vote
1answer
186 views
Controlling the lifetime of keys unlocked in a GnuPG agent
For (slightly) increased security, I would like to have better control of the lifetime of any unlocked keys, depending on the task being performed. Ideally, I would start an interactive sub-shell, do ...
0
votes
0answers
40 views
prevent gpg-agent from starting unless through socket
gpg-agent can be started though socket activation and
by forking on demand. I would like to prevent the latter
from happening. The agent should only be launched by
systemd upon socket activity without ...
0
votes
0answers
49 views
using pinentry with keepassx
I have a password manager so that I only need to remember one very strong password and still can use a new very strong password for each program that needs one.
One of the programs is GPG, so I would ...
0
votes
0answers
448 views
gpg: Sorry, no terminal at all requested - can't get input
I am trying to run the command:
git secret reveal
But I am getting error: gpg: Sorry, no terminal at all requested - can't get input
I have followed: https://help.github.com/articles/generating-a-...
0
votes
0answers
78 views
How do I troubleshoot Pass — it is taking forever to unlock my gpg key
I'm using pass to manage/consolidate passwords, but it takes a very long time to even ask for my gpg passphrase. It can take up to 30 seconds, which doesn't sound like an eternity but it sure feels ...
0
votes
1answer
137 views
how to navigate with pinentry
I was was using gpg --gen-key till I got to enter the passphrase where I get:
┌──────────────────────────────────────────────────────┐
│ Please enter Passphrase, │
│ ...
1
vote
0answers
502 views
gpg-agent mysteriously stopped working - agent on remote system no longer connecting to ssh socket [closed]
I am using a yubikey nano on my local system to do encrypt/decrypt/sign on remote systems, plus SSH agent forwarding. I recall this being a bear to setup, but it has worked flawlessly for several ...
1
vote
0answers
111 views
How do I tell pass my GPG passphrase? [duplicate]
I'm trying to set up pass and hitting a bit of a wall. I generated a new gpg key with gpg --gen-key and then ran pass init 1E3C5C98 where 1E3C5C98 is the ID for my new key, at least as I understand it....
0
votes
0answers
454 views
GPG Password Caching is Not Working After Two Hours
GPG password caching is not working after default 2 hrs period. Recently we have migrated a server to new hardware. New Server is on centos 7.3 and GPG version is 2.0.22.
We have copied entire ~user/...
3
votes
0answers
327 views
Can't sign/encrypt unless I start gpg-agent manually
I recently set up Ubuntu in a VM for development work, but found that git couldn't sign my commits. Investigating further, I found that gpg-agent wasn't able to request my passphrase via pinentry-...
2
votes
0answers
448 views
S.gpg-agent.browser not found in Debian stretch while adding ppa
I do not know about S.gpg-agent.browser error while adding ppa repository.
Can I get more information for solve this?
add-apt-repository ppa:webupd8team/java (or another repository)
gpg: keybox '/...
1
vote
0answers
288 views
How can I suppress the pinentry dialogue box if there is no gpg password?
I'm using (neo)mutt with GPG. I've set my gpg password to empty, but when I attempt to decrypt an incoming email, mutt still presents a pinentry dialogue box. If I just press Enter (with no string), ...
3
votes
0answers
3k views
S.gpg-agent.browser not found while adding ppa in debian
I am using debian strech. I try to add repostory for vim with python support , while adding I encountered gpg-agent.browser not found error
sudo add-apt-repository ppa:pi-rho/dev
[sudo] password ...
5
votes
1answer
4k views
gpg-agent refuses SSH keys with ssh-add reporting “agent refused operation”
I'm using openssh7.5p1 and gnupg 2.1.21 on arch linux (these are the default versions that come with arch). I would like to use gpg-agent as an ssh agent. I put the following in my ~/.gnupg/gpg-...
3
votes
0answers
435 views
GnuPG 2.1.20 ssh agent forwarding with yubikey on OSX fails
Tried out ProxyJump as suggested by @JensErat.
I configured it like this in ssh config:
Host jump-to-server
HostName server.hostname
ProxyJump ubuntu@jump.hostname
User ubuntu
But it does not work, ...
1
vote
1answer
111 views
How to produce a printable PGP detached signature (eventually in base16)?
Given a detached signature mydoc.sig of a document mydoc produced with
gpg --local-user <GPG_RECIPIENT> --detach-sig mydoc
How can I create a printable output of this signature in base16 (as ...
0
votes
1answer
39 views
Why are gpg key options not displayed when generating a key?
I want to generate a GPG key interactively in expert mode.
gpg --expert --gen-key
I only have the name, email and a prompt for a passphrase, no key size, key type, etc., why would it be so?
2
votes
1answer
2k views
How to make the default-cache-ttl option of gpg-agent work?
I use pass as a password manager. I would
like my passphrase to be cached during a certain amount of time to avoid
retyping my passphrase every time that I want to clip one of my passwords.
Pass is ...
0
votes
1answer
666 views
Using GPG-agent, the ssh-agent does not show the keys using “ssh-add -l”
I've been trying to get a yubikey to work as an authentication method for remote connections via ssh using this guide. I got the gpg2 set up nicely, and I can see that i've loaded the key onto the ...
2
votes
2answers
2k views
How to shutdown and restart dirmngr?
dirmngr is used by python-apt and is recommended by gnupg and gpgsm. I tried to shutdown dirmngr as shared in the manpage but got this -
└─[$] dirmngr -vv --shutdown
dirmngr[9494]: error opening '/...
2
votes
1answer
192 views
GPG passphrase change ineffective
I've changed a passphrase for a secret key:
$ gpg --edit-key <PUBKEY_ID>
passwd
<old_passphrase>
<new_passphrase>
<new_passphrase>
save
Reloaded using gpgconf --reload, ...
1
vote
1answer
838 views
gpg2 pinentry fails without X
What is working
My gpg-agent pinentry works fine under X. I can run
echo "test" | gpg2 -ase --default-recipient-self | gpg2
to cache my passwords and later run killall gpg-agent -1 to flush them.
...
3
votes
0answers
339 views
Intermingled input when using local gpg-agent from remote site
I'm starting a local gpg-agent on my Mac, with the extra-socket option. Then I connect to a remote site using SSH, forwarding the remote S.gpg-agent socket to the local S.gpg-agent.extra socket. This ...
0
votes
0answers
1k views
gpg: error creating passphrase: Operation cancelled
I compiled gnupg-2.1.15 on CentOS6.5
Once compilation is done it's working fine on same host.
But if I move binaries and libraries to remote host and try to use gpg it's giving below error.
gpg: ...
4
votes
0answers
158 views
How to run keychain from gdm ?
I have keychain manage both ssh-agent and gpg-agent. It's working from a shell, with a line like:
eval `keychain --eval --agents ssh,gpg id_rsa my_gpg_key`
in ~/.bash_profile.
I'd like to have ...
6
votes
1answer
2k views
What are the steps needed to cache passphrases entered via pinentry using gpg-preset-passphrase in 2.1.15?
I'm seeking to cache passphrases for use on an unattended machine. As doing this poses some risk, I'd prefer choosing which passphrases get cached and avoid setting both default-cache-ttl and max-...
2
votes
1answer
527 views
Why does gpg ask for password even with gpg-agent?
I started gpg-agent as follows:
eval `gpg-agent --daemon --preset`
and in this terminal window, used the gpg-preset-passphrase command as recommended:
echo secretpassword | /usr/libexec/gpg-preset-...
4
votes
2answers
5k views
Make GPG Agent Permanently Store Passphrase
I recently got GPG setup on my Mac:
brew install gpg;
brew install gpg-agent;
And generated a key pair with a passphrase.
I added use-agent to my ~/.gnupg/gpg.conf and allow-preset-passphrase to ~/....
3
votes
1answer
72 views
Custom cache duration for specific keys?
I want to configure gpg-agent to cache a specific key for a set duration longer than other keys in my keyring.
Is there a way to configure gpg-agent to set key caching duration for specific keys?
0
votes
1answer
412 views
Configure Duplicity to use pinentry?
Duplicity by default asks for passwords to GnuPG keys on start up and caches them in memory throughout process lifetime. Is there a way to have it use /usr/bin/pinentry instead so I know I'm not ...
2
votes
1answer
376 views
Systemd Service for Offlineimap + gpg encrypted PW's inside tmux works manually after system start but not autmoatically
Short description, what i'm searching for:
I want to have a detached tmux session automatically started as a systemd user service. Inside that, offlineimap should start and decrypt my login ...
1
vote
1answer
977 views
Problem configuring GPG pinentry
I have two hosts, A and B. On A I have the gpg pinentry program setup to be pinentry-curses but I have no idea how I did it anymore. I can not seem to find the difference between A and B, but on A (...
1
vote
0answers
780 views
keychain can't add gpg key
I'm setting up keychain to manage gpg-agent, with
keychain --eval --agents gpg MYGPGKEY
I get the following:
* keychain 2.8.1 ~ http://www.funtoo.org
* Starting gpg-agent...
* Adding 1 gpg key(s):...
1
vote
0answers
248 views
gpg-agent problems on Manjaro Linux (KDE)
Recently Github announced support for signed commits, so I configured Git:
git config --global user.signingkey F03CB372
git config --global commit.gpgsign true
I already had a GPG key F03CB372, ...
0
votes
1answer
360 views
How to configure gpg-agent to work correctly with obnam?
I'm trying to set up the de-duplicating backup program obnam so that it backups encrypted chunks on a remote server (raspberry pi B3 through ssh with USB hard drive) but can't get it even starting to ...
2
votes
2answers
505 views
Why does mutt hang when running gpg in tmux?
I run mutt in tmux and when I run gpg to sign or encrypt, gpg shows a blank screen where I would expect to type my passphrase. I've straced gpg and it shows that it's hanging waiting on a socket read()...
15
votes
1answer
3k views
Gentoo Linux GPG encrypts properly a file passed through parameter but throws “Inappropriate ioctl for device” when reading from standard input
I am running Gentoo Hardened with kernel 4.1.7-hardened-r1 and I am trying to encrypt a file using GPG from a shell session opened from SSH and with the DISPLAY variable disabled in order to use ...
4
votes
1answer
2k views
gpg-agent instead of ssh-agent
I have a Yubikey 4 and I want to use my GPG keys stored on this to authenticate to SSH servers.I want to use GitHub for a start. I have already added my GPG authentication key to GitHub.
My problem ...
2
votes
2answers
972 views
Pass, how to cache passphrase
I'm started to use unix password manager Pass
Some passwords are not critical to me and I'm using them very often
So it's became very annoying to me to type passphrase to get some password.
Is ...
6
votes
2answers
2k views
Change pinentry program temporarily with gpg-agent
I use gpg-agent sometimes with no X display or over ssh, so my config file contains:
pinentry-program /usr/bin/pinentry-curses
This way, the gpg passphrase is requested in curses.
That said, in ...
8
votes
1answer
402 views
Using gpg-agent-connect tool reconstruct the ssh private key file
I have lost access to my ~/.ssh/id_dsa file (OpenSSH private key file in DSA algorithm), due to forgetting the passphrase.
But, originally, I have had it imported into gpg-agent and protected it ...
