Questions tagged [gpg-agent]
The gpg-agent tag has no usage guidance.
123
questions
1
vote
3
answers
238
views
OpenGL fails to load due to nvidia driver
I have 2 video cards and installed the nvidia driver:
❯ lspci -nnk | grep -iA3 -E "(vga|NVIDIA).*(controller|GeForce)"
00:02.0 VGA compatible controller [0300]: Intel Corporation HD Graphics ...
- 102
0
votes
0
answers
44
views
Run gpg from systemd script
I wrote a wrapper for rsync. It connects to my host and makes a backup of my $HOME directory via ssh. I use gpg-agent for the ssh verification. My script works when called from a terminal emulator. It ...
- 23
0
votes
1
answer
109
views
debian howto disable gpg-agent-browser.socket
On server there is no browser nore gui, so is it possible to disable the gpg-agent-browser.socket ?
On debian 10.13 I can see those files:
/usr/lib/systemd/user/gpg-agent.socket
/usr/lib/systemd/user/...
1
vote
1
answer
7k
views
Solving gpg: decryption failed: No secret key
I have encrypted a file through gpg ***.gpg --encrypt --recipient [email protected] ***
The hard disk with my Linux system where such file was encrypted has dead. I keep just the ***.gpg file in an ...
- 135
1
vote
1
answer
612
views
How to use a GPG key for SSH on macOS
Basically, my goal is to use a single key for everything. I have a GPG key that I imported onto my MacBook, and would like to use that key for SSH authentication. However, despite my several attempts, ...
1
vote
0
answers
59
views
How to remove authentication with gpg-agent/git-credentialmanager to pus to a public repo?
I have a azure devops repository which I have made public recently. Before it was private and I used the git credential manager and gpg-agent.
If I want to push my changes I will get the error:
$ git ...
- 11
0
votes
0
answers
508
views
Pinentry-tty works with gpg but doesn't work with ssh/git
I have gpg-agent running by systemd unit with the following config:
❯ cat ~/.gnupg/gpg-agent.conf
enable-ssh-support
grab
default-cache-ttl 21600
default-cache-ttl-ssh 21600
pinentry-program /nix/...
- 133
8
votes
2
answers
2k
views
How do I get git to use the cli rather than some GUI application when asking for GPG password?
Whenever I try to create a signed git commit, I need to enter my GPG key. It spawns some GUI application to receive the password. It looked like the application was seahorse, so I uninstalled it, but ...
- 211
3
votes
1
answer
811
views
gpg-agent.conf seems to have no effect on my gpg-agent cache-ttl settings
I'd like to set the password cache in gpg-agent to 15 seconds. Here is what I have done:
My two configuration files and their contents:
/home/xixor/.gnupg/gpg.conf - telling gpg to use gpg-agent:
use-...
- 101
1
vote
0
answers
183
views
Cannot install lwp on AUR: GPG key rejected by import screener
I am trying to install a package called "lwp" on the Arch User Repository. It requires the pgp key 4EEDEE4D29DAE8A18CAFDA18BEC621B96C853813
When I try and import the following key, I get an ...
- 91
1
vote
1
answer
327
views
Remembering gpg pass-phrase for certain processes
I use GNU's password store (pass) to save all my passwords including my email passwords.
I have a passphrase set on my GPG keys which is then remembered by gpg-agent for an hour. I also have a cron ...
- 307
0
votes
0
answers
491
views
Security concerns for gpg-agent caching the passphrase?
https://www.gnu.org/software/emacs/manual/html_node/pgg/Caching-passphrase.html
When using GnuPG (gpg) as the PGP scheme, we recommend using a program called gpg-agent for entering and caching ...
- 335
1
vote
1
answer
638
views
How to set GPG cache ttl in a shell script?
How to set gpg-agent --no-allow-external-cache --default-cache-ttl 10 --max-cache-ttl 20 in a shell script? After I issue the command, it gives gpg-agent[4869]: gpg-agent running and available but ...
- 335
0
votes
0
answers
2k
views
Export GPG Private Key WITHOUT knowning the passphrase
so I spent many hours on this now and I hope someone can give me any useful input.
I want to export an encrypted secret key from GPG (which lies in ~/.gnupg/private-keys-v1.d) but I do not have the ...
3
votes
1
answer
2k
views
Enable SSH access using a GPG key for authentication : The agent has no identities
I have followed How to enable SSH access using a GPG key for authentication to enable SSH access using a GPG key for authentication.
$ gpg2 --expert --edit-key <KEY ID>
gpg> addkey
Please ...
- 2,560
0
votes
1
answer
323
views
How to make ~/.ssh/config Match host * exec inherit current shell's tty name?
I use OS X and a private SSH key stored in a Yubikey to SSH to remote servers. Each time after my Mac sleeps and wakes, I need to run gpg-connect-agent updatestartuptty /bye. This answer said I can ...
- 205
3
votes
2
answers
2k
views
gpg-agent hanging when trying to access private keys
I'm having trouble using gpg (actually, the gpg-agent) on my Debian Bullseye (Stable) system. More precisely, I use the following:
gpg --version | head -n2
gpg (GnuPG) 2.2.27
libgcrypt 1.8.8
uname -...
- 376
0
votes
1
answer
2k
views
Why can't I connect to ssh using an address?
I have configured gpg-agent to connect to ssh, but for some reason I cannot connect using the device address. In ~/.ssh/config I added
Host openwrt
Hostname 192.168.1.1
User root
Now using ssh ...
- 3
1
vote
2
answers
2k
views
ssh with gpg-agent forwarding fails with "remote port forwarding failed for listen path"
SSH to remote machine using gpg-agent forwarding fails, but works with other machines. I cannot further ssh from remote machine using my local gpg-agent credentials.
ssh -Avvv user@remotehost shows ...
- 287
1
vote
1
answer
3k
views
How to forward gpg-agent from host to docker container and reuse cached passphrase?
Information:
GPG version: 2.2.23
Docker version 20.10.5
I am playing around with GPG on my laptop and trying to reuse it inside docker container.
The docker container is simply a PHP-FPM alpine image....
- 31
0
votes
1
answer
670
views
Why does `ssh-add` not show my GPG authentication key?
I tried to set up an authentication subkey with GPG for authentication against SSH servers, following this instruction set. Everything seems to work so far, but ssh-add -l does not show any keys:
$ ...
- 861
2
votes
1
answer
2k
views
GPG key is not getting generated : agent_genkey in gpg is looking for some file
I'm facing issue to generate gpg key on my mac(10.15.7 Catalina). It is showing some error that the agent_genkey is looking for some file which is not available.
Below is the debug information from ...
- 267
0
votes
1
answer
704
views
Using specific gpg key in ssh_config
I have multiple GPG keys. One of them I use on daily basis, signing commits, e-mails and such, it is on my computers and ready at hand. I have a different key that I consider more trustworthy, I use ...
- 41
2
votes
1
answer
2k
views
gpg-agent (macOS) doesn't provide any key for SSH
There are several topics addressing similar issues, but none of the solutions provided there work for my environment, being:
macOS 11.2.3 (MacBookPro M1/Apple silicon)
GnuPG 2.2.27 (installed via ...
- 51
7
votes
2
answers
2k
views
How can I use GPG agent forwarding over ssh when systemd owns the remote sockets?
I'm trying to follow these guides and answers
https://wiki.gnupg.org/AgentForwarding
https://superuser.com/questions/161973/how-can-i-forward-a-gpg-key-via-ssh-agent
https://gist.github.com/...
- 394
2
votes
2
answers
3k
views
gpg failed to sign the data, failed to write commit object
I have searched the whole universe this error but i could not find any helpful tips.
I have created a key using keybase and added my public key to github gpg
my gpg --list-secret-keys --keyid-format ...
- 121
2
votes
1
answer
688
views
GPG pinentry not receiving key presses during passphrase entry when forwarding gpg-agent
When forwarding my gpg-agent to a remote server I am able to see the my private key listed.
Even though I unlocked my key locally I still need to unlock it on the remote machine.
However when I try to ...
- 21
0
votes
1
answer
307
views
gpg does not prompt for password - dwm
I setup gpg with pass on a new computer and pass does not prompt me for the password of my gpg key, meaning I can't access my encrypted passwords on that computer.
What can I do?
when I run pass ...
- 131
3
votes
2
answers
1k
views
Why would GPG Pinentry be slow when opening in GUI but instantaneous when opening in CLI?
Having a hard time figuring out the debugging steps for this behavior.
I'll run some gpg command and, typically, about 20 seconds later a GUI Pinentry window will pop up where I type in my password ...
- 211
2
votes
0
answers
359
views
Is it possible to check for the presence of a cached GPG key without modifying the GPG timer?
I only know a way* of getting the information of the presence of a cached GPG passphrase, that is, to run
$ gpg-connect-agent 'keyinfo --list' /bye
S KEYINFO 01B3BE66C2EAC153C4ED25F01FEE13D356EF289F D ...
0
votes
1
answer
43
views
How to use gnupg remotely on buster while also logged into the local GUI
I have a Debian buster system where I am logged in to the local GUI and also logged in over ssh. I need to sign something with gnupg over ssh.
Unfortunately I get no prompt for a passphrase on my ssh ...
- 4,312
2
votes
1
answer
1k
views
Starting gpg-agent with specific options
I have an application, run as a service by a system user, which uses GPG (using libgpgme in C). This user has no home directory and I would like to eliminate password caching.
Therefore I'd like gpg-...
- 13.1k
0
votes
1
answer
597
views
How to start GnuPG SSH Agent for gvfs?
I use Gnome 3.36.3 (Ubuntu 20.04.1) with GnuPG 2.2.19 as SSH agent.
I tell OpenSSH where to find the GnuPG SSH agent socket in my ~/.profile file:
export SSH_AUTH_SOCK=$(gpgconf --list-dirs agent-ssh-...
- 36
4
votes
1
answer
2k
views
How to get more gpg-agent info?
I followed
encrypted netrc file with gpg
tutorial.
I edited my
~/.profile
like this
if test -f $HOME/.gpg-agent-info && \
kill -0 `cut -d: -f 2 $HOME/.gpg-agent-info` 2>/dev/null; then
...
- 1,493
6
votes
1
answer
7k
views
How to cache gpg key passphrase with gpg-agent and keychain on Debian 10?
I have a Debian 10 server. I want to send email with msmtp and I need to cache a passphrase for a gpg key. The smtp password needed by msmtp is encrypted in a file using this gpg key. msmtp will use ...
- 131
3
votes
1
answer
2k
views
How to run gpg agent with custom config when the agent starts automatically after running a specific gpg command?
From the documentation, I can run gpg-agent with custom config like this and I think this is the official way:
The following gpg-agent.conf contains this:
allow-preset-passphrase
default-cache-ttl ...
- 403
5
votes
1
answer
4k
views
why does gpg-agent create several sockets
when using gpg with gpg-agent, following sockets are created in my ~/.gnupg directory:
S.gpg-agent
S.gpg-agent.browser
S.gpg-agent.extra
S.gpg-agent.ssh
I assume, S.gpg-agent is the standard gpg-...
- 443
1
vote
1
answer
520
views
How can I generate gpg keys in scripts without leaving gpg-agent running?
Recent versions of gpg launch a persistent user process (gpg-agent) when generating keys. This process remains running even after the command terminates. I want to change this behavior.
Currently, I'm ...
- 1,008
3
votes
1
answer
323
views
Gnupg secp256k1 signature does not match other implementations
I am trying to make the gpg agent sign for cryptocurrency purposes. I've tried signing a couple of hashes, and the signature of one of them gets a different r while getting the same s than other ...
- 729
1
vote
0
answers
2k
views
gpg-agent on start up without open session
Environment
Ubuntu Server 18.04
gpg2 v2.2.4
pass v1.7.1
Question
Is there a way to start gpg-agent --supervised on startup ? When I try to start gpg-agent --supervised, I get :
gpg-agent (GnuPG) ...
- 111
1
vote
3
answers
12k
views
GPG Key Gen Fails - no such file or directory
I believe I've read and tried all the suggestions, starting with this post about the exact same issue.
I'm trying to generate a new key with:
gpg --full-generate-key
and it keeps ending with:
gpg: ...
- 111
1
vote
1
answer
2k
views
how to disable systemd service so that it does not start upon boot
According to https://wiki.debian.org/systemd systemctl disable servicename should prevent the service from starting upon boot.
If I do
systemctl --user stop gpg-agent
systemctl --user disable gpg-...
- 521
5
votes
1
answer
3k
views
What is the proper configuration for gpg, ssh, and gpg-agent to use GPG auth subkeys for SSH with pinentry in a multi-session tmux environment?
Context
I would like to use GPG authentication subkeys instead of SSH keys.
I would also like to use gpg-agent to manage password caching for these keys.
I am running in a headless environment, so I ...
- 275
0
votes
0
answers
179
views
How to fix remote gpg agent when it stops working?
This is driving me crazy. I previously asked this:
gpg-agent mysteriously stopped working - agent on remote system no longer connecting to ssh socket
If I log out overnight everything will work when ...
- 79
0
votes
1
answer
363
views
Recover lost ssh key still registered in gpg agent
I've been using a ssh key for a while by opening it using gpg agent. I do remember the gpg agent password, but I don't remember the ssh key.
How could I recover the ssh key from the gpg agent?
- 3,721
11
votes
1
answer
12k
views
"gpg-agent is older than us" warning message even after running gpgconf --kill all [closed]
I have installed gpg version 2.2.17 from source.
When I run gpg --card-status gpg reports:
gpg: WARNING: server 'gpg-agent' is older than us (2.2.4 < 2.2.17).
gpg: Note: Outdated servers may ...
- 381
1
vote
2
answers
980
views
apt says that I have a held broken package but this package doesn't exist
When I'm trying to install the gpg-agent package, I get an error
The following packages have unmet dependencies:
gpg-agent : Depends: libassuan0 (>= 2.5.1) but 2.4.3-2 is to be installed
...
- 11
4
votes
0
answers
420
views
Why is StreamLocalBindUnlink disabled by default?
I want to enable GPG agent forwarding, and found that StreamLocalBindUnlink is disabled by default on sshd.
Why is it disabled by default?
Is there any security risk in enabling it? Since X11 ...
- 141
4
votes
1
answer
1k
views
SSH server accepts key, but signing fails
I have recently tried migrating from a standard ssh public key setup to managing my keys with GPG. Following instructions on my distribution's wiki, I set up ssh to use gpg-agent instead of the ...
- 41
3
votes
3
answers
3k
views
gpg - gpg-preset-passphrase installation
Issue:
- The passphrase is repeatedly being requested when I pass show <name of credential>.
Doing some Googling, I found you can do that with gpg-preset-passphrase, however I'm not sure where ...
- 265