2022 Developer Survey is open! Take survey.

Questions tagged [gpg-agent]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
39 views

Use NTRU+x25519 key exchange with gpg-agent?

OpenSSH now (as of v9.0) defaults to 'sntrup761x25519-sha512@openssh.com' as its key exchange algortihm. When using gpg-agent (for example, but I don't think necessarily, with an OpenPGP smartcard ...
user avatar
  • 1,588
0 votes
0 answers
51 views

Export GPG Private Key WITHOUT knowning the passphrase

so I spent many hours on this now and I hope someone can give me any useful input. I want to export an encrypted secret key from GPG (which lies in ~/.gnupg/private-keys-v1.d) but I do not have the ...
user avatar
1 vote
0 answers
167 views

Enable SSH access using a GPG key for authentication : The agent has no identities

I have followed How to enable SSH access using a GPG key for authentication to enable SSH access using a GPG key for authentication. $ gpg2 --expert --edit-key <KEY ID> gpg> addkey Please ...
user avatar
  • 1,201
0 votes
1 answer
115 views

How to make ~/.ssh/config Match host * exec inherit current shell's tty name?

I use OS X and a private SSH key stored in a Yubikey to SSH to remote servers. Each time after my Mac sleeps and wakes, I need to run gpg-connect-agent updatestartuptty /bye. This answer said I can ...
user avatar
  • 185
3 votes
2 answers
230 views

gpg-agent hanging when trying to access private keys

I'm having trouble using gpg (actually, the gpg-agent) on my Debian Bullseye (Stable) system. More precisely, I use the following: gpg --version | head -n2 gpg (GnuPG) 2.2.27 libgcrypt 1.8.8 uname -...
user avatar
  • 198
0 votes
1 answer
1k views

Why can't I connect to ssh using an address?

I have configured gpg-agent to connect to ssh, but for some reason I cannot connect using the device address. In ~/.ssh/config I added Host openwrt Hostname 192.168.1.1 User root Now using ssh ...
user avatar
  • 3
1 vote
2 answers
573 views

ssh with gpg-agent forwarding fails with "remote port forwarding failed for listen path"

SSH to remote machine using gpg-agent forwarding fails, but works with other machines. I cannot further ssh from remote machine using my local gpg-agent credentials. ssh -Avvv user@remotehost shows ...
user avatar
  • 277
0 votes
0 answers
13 views

GPG - use cached key before prompting for other cards when multiple receivers?

When using gpg 2.2.28 & gpg-agent to decrypt a ciphertext that has been encrypted for (any one of) multiple 'receivers', the default behaviour is that it tries to find and use private keys in some ...
user avatar
  • 1,588
1 vote
1 answer
705 views

How to forward gpg-agent from host to docker container and reuse cached passphrase?

Information: GPG version: 2.2.23 Docker version 20.10.5 I am playing around with GPG on my laptop and trying to reuse it inside docker container. The docker container is simply a PHP-FPM alpine image....
user avatar
  • 31
0 votes
1 answer
65 views

Why does `ssh-add` not show my GPG authentication key?

I tried to set up an authentication subkey with GPG for authentication against SSH servers, following this instruction set. Everything seems to work so far, but ssh-add -l does not show any keys: $ ...
user avatar
  • 761
2 votes
1 answer
584 views

GPG key is not getting generated : agent_genkey in gpg is looking for some file

I'm facing issue to generate gpg key on my mac(10.15.7 Catalina). It is showing some error that the agent_genkey is looking for some file which is not available. Below is the debug information from ...
user avatar
  • 267
0 votes
0 answers
72 views

Using specific gpg key in ssh_config

I have multiple GPG keys. One of them I use on daily basis, signing commits, e-mails and such, it is on my computers and ready at hand. I have a different key that I consider more trustworthy, I use ...
user avatar
  • 41
2 votes
1 answer
809 views

gpg-agent (macOS) doesn't provide any key for SSH

There are several topics addressing similar issues, but none of the solutions provided there work for my environment, being: macOS 11.2.3 (MacBookPro M1/Apple silicon) GnuPG 2.2.27 (installed via ...
user avatar
4 votes
1 answer
645 views

How can I use GPG agent forwarding over ssh when systemd owns the remote sockets?

I'm trying to follow these guides and answers https://wiki.gnupg.org/AgentForwarding https://superuser.com/questions/161973/how-can-i-forward-a-gpg-key-via-ssh-agent https://gist.github.com/...
user avatar
  • 306
1 vote
2 answers
2k views

gpg failed to sign the data, failed to write commit object

I have searched the whole universe this error but i could not find any helpful tips. I have created a key using keybase and added my public key to github gpg my gpg --list-secret-keys --keyid-format ...
user avatar
1 vote
0 answers
183 views

GPG pinentry not receiving key presses during passphrase entry when forwarding gpg-agent

When forwarding my gpg-agent to a remote server I am able to see the my private key listed. Even though I unlocked my key locally I still need to unlock it on the remote machine. However when I try to ...
user avatar
  • 11
0 votes
1 answer
100 views

gpg does not prompt for password - dwm

I setup gpg with pass on a new computer and pass does not prompt me for the password of my gpg key, meaning I can't access my encrypted passwords on that computer. What can I do? when I run pass ...
user avatar
0 votes
1 answer
458 views

Why would GPG Pinentry be slow when opening in GUI but instantaneous when opening in CLI?

Having a hard time figuring out the debugging steps for this behavior. I'll run some gpg command and, typically, about 20 seconds later a GUI Pinentry window will pop up where I type in my password ...
user avatar
  • 161
2 votes
0 answers
104 views

Is it possible to check for the presence of a cached GPG key without modifying the GPG timer?

I only know a way* of getting the information of the presence of a cached GPG passphrase, that is, to run $ gpg-connect-agent 'keyinfo --list' /bye S KEYINFO 01B3BE66C2EAC153C4ED25F01FEE13D356EF289F D ...
user avatar
0 votes
1 answer
26 views

How to use gnupg remotely on buster while also logged into the local GUI

I have a Debian buster system where I am logged in to the local GUI and also logged in over ssh. I need to sign something with gnupg over ssh. Unfortunately I get no prompt for a passphrase on my ssh ...
user avatar
  • 3,870
1 vote
1 answer
357 views

Starting gpg-agent with specific options

I have an application, run as a service by a system user, which uses GPG (using libgpgme in C). This user has no home directory and I would like to eliminate password caching. Therefore I'd like gpg-...
user avatar
  • 8,649
0 votes
1 answer
295 views

How to start GnuPG SSH Agent for gvfs?

I use Gnome 3.36.3 (Ubuntu 20.04.1) with GnuPG 2.2.19 as SSH agent. I tell OpenSSH where to find the GnuPG SSH agent socket in my ~/.profile file: export SSH_AUTH_SOCK=$(gpgconf --list-dirs agent-ssh-...
user avatar
  • 36
2 votes
1 answer
591 views

How to get more gpg-agent info?

I followed encrypted netrc file with gpg tutorial. I edited my ~/.profile like this if test -f $HOME/.gpg-agent-info && \ kill -0 `cut -d: -f 2 $HOME/.gpg-agent-info` 2>/dev/null; then ...
user avatar
3 votes
1 answer
3k views

How to cache gpg key passphrase with gpg-agent and keychain on Debian 10?

I have a Debian 10 server. I want to send email with msmtp and I need to cache a passphrase for a gpg key. The smtp password needed by msmtp is encrypted in a file using this gpg key. msmtp will use ...
user avatar
  • 71
2 votes
1 answer
791 views

How to run gpg agent with custom config when the agent starts automatically after running a specific gpg command?

From the documentation, I can run gpg-agent with custom config like this and I think this is the official way: The following gpg-agent.conf contains this: allow-preset-passphrase default-cache-ttl ...
user avatar
  • 335
5 votes
1 answer
2k views

why does gpg-agent create several sockets

when using gpg with gpg-agent, following sockets are created in my ~/.gnupg directory: S.gpg-agent S.gpg-agent.browser S.gpg-agent.extra S.gpg-agent.ssh I assume, S.gpg-agent is the standard gpg-...
user avatar
1 vote
1 answer
194 views

How can I generate gpg keys in scripts without leaving gpg-agent running?

Recent versions of gpg launch a persistent user process (gpg-agent) when generating keys. This process remains running even after the command terminates. I want to change this behavior. Currently, I'm ...
user avatar
3 votes
1 answer
204 views

Gnupg secp256k1 signature does not match other implementations

I am trying to make the gpg agent sign for cryptocurrency purposes. I've tried signing a couple of hashes, and the signature of one of them gets a different r while getting the same s than other ...
user avatar
  • 669
1 vote
0 answers
696 views

gpg-agent on start up without open session

Environment Ubuntu Server 18.04 gpg2 v2.2.4 pass v1.7.1 Question Is there a way to start gpg-agent --supervised on startup ? When I try to start gpg-agent --supervised, I get : gpg-agent (GnuPG) ...
user avatar
1 vote
3 answers
5k views

GPG Key Gen Fails - no such file or directory

I believe I've read and tried all the suggestions, starting with this post about the exact same issue. I'm trying to generate a new key with: gpg --full-generate-key and it keeps ending with: gpg: ...
user avatar
  • 111
0 votes
1 answer
750 views

how to disable systemd service so that it does not start upon boot

According to https://wiki.debian.org/systemd systemctl disable servicename should prevent the service from starting upon boot. If I do systemctl --user stop gpg-agent systemctl --user disable gpg-...
user avatar
  • 441
3 votes
1 answer
2k views

What is the proper configuration for gpg, ssh, and gpg-agent to use GPG auth subkeys for SSH with pinentry in a multi-session tmux environment?

Context I would like to use GPG authentication subkeys instead of SSH keys. I would also like to use gpg-agent to manage password caching for these keys. I am running in a headless environment, so I ...
user avatar
0 votes
0 answers
82 views

How to fix remote gpg agent when it stops working?

This is driving me crazy. I previously asked this: gpg-agent mysteriously stopped working - agent on remote system no longer connecting to ssh socket If I log out overnight everything will work when ...
user avatar
  • 57
0 votes
1 answer
269 views

Recover lost ssh key still registered in gpg agent

I've been using a ssh key for a while by opening it using gpg agent. I do remember the gpg agent password, but I don't remember the ssh key. How could I recover the ssh key from the gpg agent?
user avatar
  • 2,138
10 votes
1 answer
6k views

"gpg-agent is older than us" warning message even after running gpgconf --kill all [closed]

I have installed gpg version 2.2.17 from source. When I run gpg --card-status gpg reports: gpg: WARNING: server 'gpg-agent' is older than us (2.2.4 < 2.2.17). gpg: Note: Outdated servers may ...
user avatar
1 vote
2 answers
546 views

apt says that I have a held broken package but this package doesn't exist

When I'm trying to install the gpg-agent package, I get an error The following packages have unmet dependencies: gpg-agent : Depends: libassuan0 (>= 2.5.1) but 2.4.3-2 is to be installed ...
user avatar
  • 11
5 votes
0 answers
255 views

Why is StreamLocalBindUnlink disabled by default?

I want to enable GPG agent forwarding, and found that StreamLocalBindUnlink is disabled by default on sshd. Why is it disabled by default? Is there any security risk in enabling it? Since X11 ...
user avatar
4 votes
1 answer
835 views

SSH server accepts key, but signing fails

I have recently tried migrating from a standard ssh public key setup to managing my keys with GPG. Following instructions on my distribution's wiki, I set up ssh to use gpg-agent instead of the ...
user avatar
  • 41
3 votes
2 answers
2k views

gpg - gpg-preset-passphrase installation

Issue: - The passphrase is repeatedly being requested when I pass show <name of credential>. Doing some Googling, I found you can do that with gpg-preset-passphrase, however I'm not sure where ...
user avatar
  • 233
0 votes
2 answers
473 views

Is it possible to reuse a GnuPG key in another installation?

I have a GPG key which I use to sign and submit packages to Launchpad. Is it possible to reuse that key in another installation, or do I always have to create a new key for the new installation of a ...
user avatar
4 votes
0 answers
332 views

How to forward GPG to a linux machine from Windows?

Here is my set up: Windows 10 machine, my desktop PC. Ubuntu 18 machine, this is my home server Yubikey, has my private GPG keys on it My work flow is as follows: Plug in my Yubikey into USB port ...
user avatar
1 vote
1 answer
270 views

Securely Piping String in Local Text File to Remote Command using SSH

The following takes place on Ubuntu 18. I need to automate the remote seeding of a gpg-agent with a passphrase stored in a file on my local machine using SSH. The passphrase needs to be handled in ...
user avatar
  • 165
2 votes
2 answers
2k views

Where does GPG Agent store the passphrase -- I need to restore it

I forgot my GPG key passphrase. I know my computer is storing it somewhere because I decrypt strings with it, without a password, for example: $ gpg --decrypt -r me@example.com ~/.password-store/...
user avatar
  • 121
2 votes
2 answers
878 views

GPG cache options don't work

There is an option named default-cache-ttl that controls how long the agent will remember the password to the private key. However, when I put it in the config file it doesn't work - instead, gpg ...
user avatar
  • 2,341
1 vote
1 answer
2k views

gpg-agent is running, but I'm always prompted for password

When I run gpg2, I'm prompted for a password every time I use it. Based on my reading of the gpg-agent man pages, I should only be prompted the first time. gpg-agent is a daemon to manage secret (...
user avatar
1 vote
0 answers
636 views

GPG2 No Longer Caching

This just started happening a couple of days ago on Fedora 28. I want GPG to remember my private key passphrase so I can decrypt files without entering the passphrase every time. If I run gpg2 to ...
user avatar
7 votes
1 answer
103 views

How can I see queries to gpg-agent?

I am using gpg-agent together with a Yubikey to securely store my GPG keys. In addition I've enabled so that whenever a authentication, sign or decryption request happens I must physically push the ...
user avatar
  • 170
2 votes
1 answer
4k views

How to solve gpg: bad data signature from key: KEY_ID Wrong key usage (0x19, 0x2)

I'm using Arch Linux Linux uplink 4.14.56-1-lts #1 SMP Tue Jul 17 20:11:42 CEST 2018 x86_64 GNU/Linux. I'm trying to solve a problem I'm currently have with GnuPG 2.2.9 (libgcrypt 1.8.3), but I've ...
user avatar
  • 865
2 votes
1 answer
854 views

Controlling the lifetime of keys unlocked in a GnuPG agent

For (slightly) increased security, I would like to have better control of the lifetime of any unlocked keys, depending on the task being performed. Ideally, I would start an interactive sub-shell, do ...
user avatar
  • 275
0 votes
0 answers
1k views

gpg: Sorry, no terminal at all requested - can't get input

I am trying to run the command: git secret reveal But I am getting error: gpg: Sorry, no terminal at all requested - can't get input I have followed: https://help.github.com/articles/generating-a-...
user avatar
  • 145