Questions tagged [gpg-agent]
The gpg-agent tag has no usage guidance.
83
questions
0
votes
0answers
53 views
What is the proper configuration for gpg, ssh, and gpg-agent to use GPG auth subkeys for SSH with pinentry in a multi-session tmux environment?
Context
I would like to use GPG authentication subkeys instead of SSH keys.
I would also like to use gpg-agent to manage password caching for these keys.
I am running in a headless environment, so ...
0
votes
0answers
13 views
How to fix remote gpg agent when it stops working?
This is driving me crazy. I previously asked this:
gpg-agent mysteriously stopped working - agent on remote system no longer connecting to ssh socket
If I log out overnight everything will work when ...
0
votes
1answer
81 views
Recover lost ssh key still registered in gpg agent
I've been using a ssh key for a while by opening it using gpg agent. I do remember the gpg agent password, but I don't remember the ssh key.
How could I recover the ssh key from the gpg agent?
0
votes
0answers
172 views
gpg-agent & systemd sockets not remembering passphrases
I see that gpg-agent can be managed using systemd's sockets. In particular, there are the following sockets are services:
dirmngr.service
dirmngr.socket
gpg-agent-browser.socket
gpg-agent-extra....
2
votes
1answer
285 views
“gpg-agent is older than us” warning message even after running gpgconf --kill all [closed]
I have installed gpg version 2.2.17 from source.
When I run gpg --card-status gpg reports:
gpg: WARNING: server 'gpg-agent' is older than us (2.2.4 < 2.2.17).
gpg: Note: Outdated servers may ...
1
vote
2answers
140 views
apt says that I have a held broken package but this package doesn't exist
When I'm trying to install the gpg-agent package, I get an error
The following packages have unmet dependencies:
gpg-agent : Depends: libassuan0 (>= 2.5.1) but 2.4.3-2 is to be installed
...
2
votes
0answers
62 views
Why is StreamLocalBindUnlink disabled by default?
I want to enable GPG agent forwarding, and found that StreamLocalBindUnlink is disabled by default on sshd.
Why is it disabled by default?
Is there any security risk in enabling it? Since X11 ...
2
votes
1answer
140 views
SSH server accepts key, but signing fails
I have recently tried migrating from a standard ssh public key setup to managing my keys with GPG. Following instructions on my distribution's wiki, I set up ssh to use gpg-agent instead of the ...
0
votes
0answers
158 views
gpg-agent: can't connect to the SCdaemon: IPC connect call failed
syslog is getting filled every 2 seconds with:
gpg-agent: can't connect to the SCdaemon: IPC connect call failed
When I kill gpg-agent it respawns again. I am not really actively using gpg to ...
1
vote
2answers
421 views
gpg - gpg-preset-passphrase installation
Issue:
- The passphrase is repeatedly being requested when I pass show <name of credential>.
Doing some Googling, I found you can do that with gpg-preset-passphrase, however I'm not sure where ...
0
votes
2answers
54 views
Is it possible to reuse a GnuPG key in another installation?
I have a GPG key which I use to sign and submit packages to Launchpad.
Is it possible to reuse that key in another installation, or do I always have to create a new key for the new installation of a ...
1
vote
0answers
84 views
How to forward GPG to a linux machine from Windows?
Here is my set up:
Windows 10 machine, my desktop PC.
Ubuntu 18 machine, this is my home server
Yubikey, has my private GPG keys on it
My work flow is as follows:
Plug in my Yubikey into USB port ...
1
vote
1answer
112 views
Securely Piping String in Local Text File to Remote Command using SSH
The following takes place on Ubuntu 18.
I need to automate the remote seeding of a gpg-agent with a passphrase stored in a file on my local machine using SSH.
The passphrase needs to be handled in ...
2
votes
2answers
315 views
Where does GPG Agent store the passphrase — I need to restore it
I forgot my GPG key passphrase.
I know my computer is storing it somewhere because I decrypt strings with it, without a password, for example:
$ gpg --decrypt -r me@example.com ~/.password-store/...
-1
votes
1answer
346 views
GPG cache options don't work
There is an option named default-cache-ttl that controls how long the agent will remember the password to the private key. However, when I put it in the config file it doesn't work - instead, gpg ...
0
votes
1answer
494 views
gpg-agent is running, but I'm always prompted for password
When I run gpg2, I'm prompted for a password every time I use it.
Based on my reading of the gpg-agent man pages, I should only be
prompted the first time.
gpg-agent is a daemon to manage secret (...
0
votes
0answers
344 views
GPG2 No Longer Caching
This just started happening a couple of days ago on Fedora 28. I want GPG to remember my private key passphrase so I can decrypt files without entering the passphrase every time.
If I run gpg2 to ...
7
votes
1answer
64 views
How can I see queries to gpg-agent?
I am using gpg-agent together with a Yubikey to securely store my GPG keys. In addition I've enabled so that whenever a authentication, sign or decryption request happens I must physically push the ...
1
vote
1answer
2k views
How to solve gpg: bad data signature from key: KEY_ID Wrong key usage (0x19, 0x2)
I'm using Arch Linux Linux uplink 4.14.56-1-lts #1 SMP Tue Jul 17 20:11:42 CEST 2018 x86_64 GNU/Linux. I'm trying to solve a problem I'm currently have with GnuPG 2.2.9 (libgcrypt 1.8.3), but I've ...
1
vote
1answer
396 views
Controlling the lifetime of keys unlocked in a GnuPG agent
For (slightly) increased security, I would like to have better control of the lifetime of any unlocked keys, depending on the task being performed. Ideally, I would start an interactive sub-shell, do ...
0
votes
0answers
833 views
gpg: Sorry, no terminal at all requested - can't get input
I am trying to run the command:
git secret reveal
But I am getting error: gpg: Sorry, no terminal at all requested - can't get input
I have followed: https://help.github.com/articles/generating-a-...
1
vote
0answers
204 views
How do I troubleshoot Pass — it is taking forever to unlock my gpg key
I'm using pass to manage/consolidate passwords, but it takes a very long time to even ask for my gpg passphrase. It can take up to 30 seconds, which doesn't sound like an eternity but it sure feels ...
1
vote
1answer
229 views
how to navigate with pinentry
I was was using gpg --gen-key till I got to enter the passphrase where I get:
┌──────────────────────────────────────────────────────┐
│ Please enter Passphrase, │
│ ...
2
votes
0answers
920 views
gpg-agent mysteriously stopped working - agent on remote system no longer connecting to ssh socket [closed]
I am using a yubikey nano on my local system to do encrypt/decrypt/sign on remote systems, plus SSH agent forwarding. I recall this being a bear to setup, but it has worked flawlessly for several ...
1
vote
0answers
205 views
How do I tell pass my GPG passphrase? [duplicate]
I'm trying to set up pass and hitting a bit of a wall. I generated a new gpg key with gpg --gen-key and then ran pass init 1E3C5C98 where 1E3C5C98 is the ID for my new key, at least as I understand it....
3
votes
0answers
557 views
Can't sign/encrypt unless I start gpg-agent manually
I recently set up Ubuntu in a VM for development work, but found that git couldn't sign my commits. Investigating further, I found that gpg-agent wasn't able to request my passphrase via pinentry-...
2
votes
0answers
648 views
S.gpg-agent.browser not found in Debian stretch while adding ppa
I do not know about S.gpg-agent.browser error while adding ppa repository.
Can I get more information for solve this?
add-apt-repository ppa:webupd8team/java (or another repository)
gpg: keybox '/...
3
votes
0answers
523 views
How can I suppress the pinentry dialogue box if there is no gpg password?
I'm using (neo)mutt with GPG. I've set my gpg password to empty, but when I attempt to decrypt an incoming email, mutt still presents a pinentry dialogue box. If I just press Enter (with no string), ...
5
votes
0answers
4k views
S.gpg-agent.browser not found while adding ppa in debian
I am using debian strech. I try to add repostory for vim with python support , while adding I encountered gpg-agent.browser not found error
sudo add-apt-repository ppa:pi-rho/dev
[sudo] password ...
11
votes
2answers
8k views
gpg-agent refuses SSH keys with ssh-add reporting “agent refused operation”
I'm using openssh7.5p1 and gnupg 2.1.21 on arch linux (these are the default versions that come with arch). I would like to use gpg-agent as an ssh agent. I put the following in my ~/.gnupg/gpg-...
2
votes
0answers
551 views
GnuPG 2.1.20 ssh agent forwarding with yubikey on OSX fails
Tried out ProxyJump as suggested by @JensErat.
I configured it like this in ssh config:
Host jump-to-server
HostName server.hostname
ProxyJump ubuntu@jump.hostname
User ubuntu
But it does not work, ...
1
vote
1answer
207 views
How to produce a printable PGP detached signature (eventually in base16)?
Given a detached signature mydoc.sig of a document mydoc produced with
gpg --local-user <GPG_RECIPIENT> --detach-sig mydoc
How can I create a printable output of this signature in base16 (as ...
0
votes
1answer
57 views
Why are gpg key options not displayed when generating a key?
I want to generate a GPG key interactively in expert mode.
gpg --expert --gen-key
I only have the name, email and a prompt for a passphrase, no key size, key type, etc., why would it be so?
2
votes
1answer
3k views
How to make the default-cache-ttl option of gpg-agent work?
I use pass as a password manager. I would
like my passphrase to be cached during a certain amount of time to avoid
retyping my passphrase every time that I want to clip one of my passwords.
Pass is ...
0
votes
1answer
967 views
Using GPG-agent, the ssh-agent does not show the keys using “ssh-add -l”
I've been trying to get a yubikey to work as an authentication method for remote connections via ssh using this guide. I got the gpg2 set up nicely, and I can see that i've loaded the key onto the ...
2
votes
2answers
3k views
How to shutdown and restart dirmngr?
dirmngr is used by python-apt and is recommended by gnupg and gpgsm. I tried to shutdown dirmngr as shared in the manpage but got this -
└─[$] dirmngr -vv --shutdown
dirmngr[9494]: error opening '/...
2
votes
1answer
287 views
GPG passphrase change ineffective
I've changed a passphrase for a secret key:
$ gpg --edit-key <PUBKEY_ID>
passwd
<old_passphrase>
<new_passphrase>
<new_passphrase>
save
Reloaded using gpgconf --reload, ...
1
vote
2answers
1k views
gpg2 pinentry fails without X
What is working
My gpg-agent pinentry works fine under X. I can run
echo "test" | gpg2 -ase --default-recipient-self | gpg2
to cache my passwords and later run killall gpg-agent -1 to flush them.
...
5
votes
0answers
494 views
Intermingled input when using local gpg-agent from remote site
I'm starting a local gpg-agent on my Mac, with the extra-socket option. Then I connect to a remote site using SSH, forwarding the remote S.gpg-agent socket to the local S.gpg-agent.extra socket. This ...
3
votes
0answers
199 views
How to run keychain from gdm ?
I have keychain manage both ssh-agent and gpg-agent. It's working from a shell, with a line like:
eval `keychain --eval --agents ssh,gpg id_rsa my_gpg_key`
in ~/.bash_profile.
I'd like to have ...
8
votes
2answers
4k views
What are the steps needed to cache passphrases entered via pinentry using gpg-preset-passphrase in 2.1.15?
I'm seeking to cache passphrases for use on an unattended machine. As doing this poses some risk, I'd prefer choosing which passphrases get cached and avoid setting both default-cache-ttl and max-...
3
votes
1answer
716 views
Why does gpg ask for password even with gpg-agent?
I started gpg-agent as follows:
eval `gpg-agent --daemon --preset`
and in this terminal window, used the gpg-preset-passphrase command as recommended:
echo secretpassword | /usr/libexec/gpg-preset-...
4
votes
2answers
8k views
Make GPG Agent Permanently Store Passphrase
I recently got GPG setup on my Mac:
brew install gpg;
brew install gpg-agent;
And generated a key pair with a passphrase.
I added use-agent to my ~/.gnupg/gpg.conf and allow-preset-passphrase to ~/....
3
votes
1answer
100 views
Custom cache duration for specific keys?
I want to configure gpg-agent to cache a specific key for a set duration longer than other keys in my keyring.
Is there a way to configure gpg-agent to set key caching duration for specific keys?
0
votes
1answer
503 views
Configure Duplicity to use pinentry?
Duplicity by default asks for passwords to GnuPG keys on start up and caches them in memory throughout process lifetime. Is there a way to have it use /usr/bin/pinentry instead so I know I'm not ...
2
votes
1answer
453 views
Systemd Service for Offlineimap + gpg encrypted PW's inside tmux works manually after system start but not autmoatically
Short description, what i'm searching for:
I want to have a detached tmux session automatically started as a systemd user service. Inside that, offlineimap should start and decrypt my login ...
1
vote
1answer
1k views
Problem configuring GPG pinentry
I have two hosts, A and B. On A I have the gpg pinentry program setup to be pinentry-curses but I have no idea how I did it anymore. I can not seem to find the difference between A and B, but on A (...
1
vote
0answers
949 views
keychain can't add gpg key
I'm setting up keychain to manage gpg-agent, with
keychain --eval --agents gpg MYGPGKEY
I get the following:
* keychain 2.8.1 ~ http://www.funtoo.org
* Starting gpg-agent...
* Adding 1 gpg key(s):...
1
vote
0answers
418 views
gpg-agent problems on Manjaro Linux (KDE)
Recently Github announced support for signed commits, so I configured Git:
git config --global user.signingkey F03CB372
git config --global commit.gpgsign true
I already had a GPG key F03CB372, ...
0
votes
1answer
458 views
How to configure gpg-agent to work correctly with obnam?
I'm trying to set up the de-duplicating backup program obnam so that it backups encrypted chunks on a remote server (raspberry pi B3 through ssh with USB hard drive) but can't get it even starting to ...
