Questions tagged [gpg-agent]
The gpg-agent tag has no usage guidance.
112
questions
0
votes
0
answers
39
views
Use NTRU+x25519 key exchange with gpg-agent?
OpenSSH now (as of v9.0) defaults to 'sntrup761x25519-sha512@openssh.com' as its key exchange algortihm.
When using gpg-agent (for example, but I don't think necessarily, with an OpenPGP smartcard ...
- 1,588
0
votes
0
answers
51
views
Export GPG Private Key WITHOUT knowning the passphrase
so I spent many hours on this now and I hope someone can give me any useful input.
I want to export an encrypted secret key from GPG (which lies in ~/.gnupg/private-keys-v1.d) but I do not have the ...
1
vote
0
answers
167
views
Enable SSH access using a GPG key for authentication : The agent has no identities
I have followed How to enable SSH access using a GPG key for authentication to enable SSH access using a GPG key for authentication.
$ gpg2 --expert --edit-key <KEY ID>
gpg> addkey
Please ...
- 1,201
0
votes
1
answer
115
views
How to make ~/.ssh/config Match host * exec inherit current shell's tty name?
I use OS X and a private SSH key stored in a Yubikey to SSH to remote servers. Each time after my Mac sleeps and wakes, I need to run gpg-connect-agent updatestartuptty /bye. This answer said I can ...
- 185
3
votes
2
answers
230
views
gpg-agent hanging when trying to access private keys
I'm having trouble using gpg (actually, the gpg-agent) on my Debian Bullseye (Stable) system. More precisely, I use the following:
gpg --version | head -n2
gpg (GnuPG) 2.2.27
libgcrypt 1.8.8
uname -...
- 198
0
votes
1
answer
1k
views
Why can't I connect to ssh using an address?
I have configured gpg-agent to connect to ssh, but for some reason I cannot connect using the device address. In ~/.ssh/config I added
Host openwrt
Hostname 192.168.1.1
User root
Now using ssh ...
- 3
1
vote
2
answers
573
views
ssh with gpg-agent forwarding fails with "remote port forwarding failed for listen path"
SSH to remote machine using gpg-agent forwarding fails, but works with other machines. I cannot further ssh from remote machine using my local gpg-agent credentials.
ssh -Avvv user@remotehost shows ...
- 277
0
votes
0
answers
13
views
GPG - use cached key before prompting for other cards when multiple receivers?
When using gpg 2.2.28 & gpg-agent to decrypt a ciphertext that has been encrypted for (any one of) multiple 'receivers', the default behaviour is that it tries to find and use private keys in some ...
- 1,588
1
vote
1
answer
705
views
How to forward gpg-agent from host to docker container and reuse cached passphrase?
Information:
GPG version: 2.2.23
Docker version 20.10.5
I am playing around with GPG on my laptop and trying to reuse it inside docker container.
The docker container is simply a PHP-FPM alpine image....
- 31
0
votes
1
answer
65
views
Why does `ssh-add` not show my GPG authentication key?
I tried to set up an authentication subkey with GPG for authentication against SSH servers, following this instruction set. Everything seems to work so far, but ssh-add -l does not show any keys:
$ ...
- 761
2
votes
1
answer
584
views
GPG key is not getting generated : agent_genkey in gpg is looking for some file
I'm facing issue to generate gpg key on my mac(10.15.7 Catalina). It is showing some error that the agent_genkey is looking for some file which is not available.
Below is the debug information from ...
- 267
0
votes
0
answers
72
views
Using specific gpg key in ssh_config
I have multiple GPG keys. One of them I use on daily basis, signing commits, e-mails and such, it is on my computers and ready at hand. I have a different key that I consider more trustworthy, I use ...
- 41
2
votes
1
answer
809
views
gpg-agent (macOS) doesn't provide any key for SSH
There are several topics addressing similar issues, but none of the solutions provided there work for my environment, being:
macOS 11.2.3 (MacBookPro M1/Apple silicon)
GnuPG 2.2.27 (installed via ...
- 41
4
votes
1
answer
645
views
How can I use GPG agent forwarding over ssh when systemd owns the remote sockets?
I'm trying to follow these guides and answers
https://wiki.gnupg.org/AgentForwarding
https://superuser.com/questions/161973/how-can-i-forward-a-gpg-key-via-ssh-agent
https://gist.github.com/...
- 306
1
vote
2
answers
2k
views
gpg failed to sign the data, failed to write commit object
I have searched the whole universe this error but i could not find any helpful tips.
I have created a key using keybase and added my public key to github gpg
my gpg --list-secret-keys --keyid-format ...
- 111
1
vote
0
answers
183
views
GPG pinentry not receiving key presses during passphrase entry when forwarding gpg-agent
When forwarding my gpg-agent to a remote server I am able to see the my private key listed.
Even though I unlocked my key locally I still need to unlock it on the remote machine.
However when I try to ...
- 11
0
votes
1
answer
100
views
gpg does not prompt for password - dwm
I setup gpg with pass on a new computer and pass does not prompt me for the password of my gpg key, meaning I can't access my encrypted passwords on that computer.
What can I do?
when I run pass ...
- 85
0
votes
1
answer
458
views
Why would GPG Pinentry be slow when opening in GUI but instantaneous when opening in CLI?
Having a hard time figuring out the debugging steps for this behavior.
I'll run some gpg command and, typically, about 20 seconds later a GUI Pinentry window will pop up where I type in my password ...
- 161
2
votes
0
answers
104
views
Is it possible to check for the presence of a cached GPG key without modifying the GPG timer?
I only know a way* of getting the information of the presence of a cached GPG passphrase, that is, to run
$ gpg-connect-agent 'keyinfo --list' /bye
S KEYINFO 01B3BE66C2EAC153C4ED25F01FEE13D356EF289F D ...
0
votes
1
answer
26
views
How to use gnupg remotely on buster while also logged into the local GUI
I have a Debian buster system where I am logged in to the local GUI and also logged in over ssh. I need to sign something with gnupg over ssh.
Unfortunately I get no prompt for a passphrase on my ssh ...
- 3,870
1
vote
1
answer
357
views
Starting gpg-agent with specific options
I have an application, run as a service by a system user, which uses GPG (using libgpgme in C). This user has no home directory and I would like to eliminate password caching.
Therefore I'd like gpg-...
- 8,649
0
votes
1
answer
295
views
How to start GnuPG SSH Agent for gvfs?
I use Gnome 3.36.3 (Ubuntu 20.04.1) with GnuPG 2.2.19 as SSH agent.
I tell OpenSSH where to find the GnuPG SSH agent socket in my ~/.profile file:
export SSH_AUTH_SOCK=$(gpgconf --list-dirs agent-ssh-...
- 36
2
votes
1
answer
591
views
How to get more gpg-agent info?
I followed
encrypted netrc file with gpg
tutorial.
I edited my
~/.profile
like this
if test -f $HOME/.gpg-agent-info && \
kill -0 `cut -d: -f 2 $HOME/.gpg-agent-info` 2>/dev/null; then
...
- 1,323
3
votes
1
answer
3k
views
How to cache gpg key passphrase with gpg-agent and keychain on Debian 10?
I have a Debian 10 server. I want to send email with msmtp and I need to cache a passphrase for a gpg key. The smtp password needed by msmtp is encrypted in a file using this gpg key. msmtp will use ...
- 71
2
votes
1
answer
791
views
How to run gpg agent with custom config when the agent starts automatically after running a specific gpg command?
From the documentation, I can run gpg-agent with custom config like this and I think this is the official way:
The following gpg-agent.conf contains this:
allow-preset-passphrase
default-cache-ttl ...
- 335
5
votes
1
answer
2k
views
why does gpg-agent create several sockets
when using gpg with gpg-agent, following sockets are created in my ~/.gnupg directory:
S.gpg-agent
S.gpg-agent.browser
S.gpg-agent.extra
S.gpg-agent.ssh
I assume, S.gpg-agent is the standard gpg-...
- 422
1
vote
1
answer
194
views
How can I generate gpg keys in scripts without leaving gpg-agent running?
Recent versions of gpg launch a persistent user process (gpg-agent) when generating keys. This process remains running even after the command terminates. I want to change this behavior.
Currently, I'm ...
- 712
3
votes
1
answer
204
views
Gnupg secp256k1 signature does not match other implementations
I am trying to make the gpg agent sign for cryptocurrency purposes. I've tried signing a couple of hashes, and the signature of one of them gets a different r while getting the same s than other ...
- 669
1
vote
0
answers
696
views
gpg-agent on start up without open session
Environment
Ubuntu Server 18.04
gpg2 v2.2.4
pass v1.7.1
Question
Is there a way to start gpg-agent --supervised on startup ? When I try to start gpg-agent --supervised, I get :
gpg-agent (GnuPG) ...
- 111
1
vote
3
answers
5k
views
GPG Key Gen Fails - no such file or directory
I believe I've read and tried all the suggestions, starting with this post about the exact same issue.
I'm trying to generate a new key with:
gpg --full-generate-key
and it keeps ending with:
gpg: ...
- 111
0
votes
1
answer
750
views
how to disable systemd service so that it does not start upon boot
According to https://wiki.debian.org/systemd systemctl disable servicename should prevent the service from starting upon boot.
If I do
systemctl --user stop gpg-agent
systemctl --user disable gpg-...
- 441
3
votes
1
answer
2k
views
What is the proper configuration for gpg, ssh, and gpg-agent to use GPG auth subkeys for SSH with pinentry in a multi-session tmux environment?
Context
I would like to use GPG authentication subkeys instead of SSH keys.
I would also like to use gpg-agent to manage password caching for these keys.
I am running in a headless environment, so I ...
- 245
0
votes
0
answers
82
views
How to fix remote gpg agent when it stops working?
This is driving me crazy. I previously asked this:
gpg-agent mysteriously stopped working - agent on remote system no longer connecting to ssh socket
If I log out overnight everything will work when ...
- 57
0
votes
1
answer
269
views
Recover lost ssh key still registered in gpg agent
I've been using a ssh key for a while by opening it using gpg agent. I do remember the gpg agent password, but I don't remember the ssh key.
How could I recover the ssh key from the gpg agent?
- 2,138
10
votes
1
answer
6k
views
"gpg-agent is older than us" warning message even after running gpgconf --kill all [closed]
I have installed gpg version 2.2.17 from source.
When I run gpg --card-status gpg reports:
gpg: WARNING: server 'gpg-agent' is older than us (2.2.4 < 2.2.17).
gpg: Note: Outdated servers may ...
- 361
1
vote
2
answers
546
views
apt says that I have a held broken package but this package doesn't exist
When I'm trying to install the gpg-agent package, I get an error
The following packages have unmet dependencies:
gpg-agent : Depends: libassuan0 (>= 2.5.1) but 2.4.3-2 is to be installed
...
- 11
5
votes
0
answers
255
views
Why is StreamLocalBindUnlink disabled by default?
I want to enable GPG agent forwarding, and found that StreamLocalBindUnlink is disabled by default on sshd.
Why is it disabled by default?
Is there any security risk in enabling it? Since X11 ...
- 151
4
votes
1
answer
835
views
SSH server accepts key, but signing fails
I have recently tried migrating from a standard ssh public key setup to managing my keys with GPG. Following instructions on my distribution's wiki, I set up ssh to use gpg-agent instead of the ...
- 41
3
votes
2
answers
2k
views
gpg - gpg-preset-passphrase installation
Issue:
- The passphrase is repeatedly being requested when I pass show <name of credential>.
Doing some Googling, I found you can do that with gpg-preset-passphrase, however I'm not sure where ...
- 233
0
votes
2
answers
473
views
Is it possible to reuse a GnuPG key in another installation?
I have a GPG key which I use to sign and submit packages to Launchpad.
Is it possible to reuse that key in another installation, or do I always have to create a new key for the new installation of a ...
4
votes
0
answers
332
views
How to forward GPG to a linux machine from Windows?
Here is my set up:
Windows 10 machine, my desktop PC.
Ubuntu 18 machine, this is my home server
Yubikey, has my private GPG keys on it
My work flow is as follows:
Plug in my Yubikey into USB port ...
- 315
1
vote
1
answer
270
views
Securely Piping String in Local Text File to Remote Command using SSH
The following takes place on Ubuntu 18.
I need to automate the remote seeding of a gpg-agent with a passphrase stored in a file on my local machine using SSH.
The passphrase needs to be handled in ...
- 165
2
votes
2
answers
2k
views
Where does GPG Agent store the passphrase -- I need to restore it
I forgot my GPG key passphrase.
I know my computer is storing it somewhere because I decrypt strings with it, without a password, for example:
$ gpg --decrypt -r me@example.com ~/.password-store/...
- 121
2
votes
2
answers
878
views
GPG cache options don't work
There is an option named default-cache-ttl that controls how long the agent will remember the password to the private key. However, when I put it in the config file it doesn't work - instead, gpg ...
- 2,341
1
vote
1
answer
2k
views
gpg-agent is running, but I'm always prompted for password
When I run gpg2, I'm prompted for a password every time I use it.
Based on my reading of the gpg-agent man pages, I should only be
prompted the first time.
gpg-agent is a daemon to manage secret (...
1
vote
0
answers
636
views
GPG2 No Longer Caching
This just started happening a couple of days ago on Fedora 28. I want GPG to remember my private key passphrase so I can decrypt files without entering the passphrase every time.
If I run gpg2 to ...
- 363
7
votes
1
answer
103
views
How can I see queries to gpg-agent?
I am using gpg-agent together with a Yubikey to securely store my GPG keys. In addition I've enabled so that whenever a authentication, sign or decryption request happens I must physically push the ...
- 170
2
votes
1
answer
4k
views
How to solve gpg: bad data signature from key: KEY_ID Wrong key usage (0x19, 0x2)
I'm using Arch Linux Linux uplink 4.14.56-1-lts #1 SMP Tue Jul 17 20:11:42 CEST 2018 x86_64 GNU/Linux. I'm trying to solve a problem I'm currently have with GnuPG 2.2.9 (libgcrypt 1.8.3), but I've ...
- 865
2
votes
1
answer
854
views
Controlling the lifetime of keys unlocked in a GnuPG agent
For (slightly) increased security, I would like to have better control of the lifetime of any unlocked keys, depending on the task being performed. Ideally, I would start an interactive sub-shell, do ...
- 275
0
votes
0
answers
1k
views
gpg: Sorry, no terminal at all requested - can't get input
I am trying to run the command:
git secret reveal
But I am getting error: gpg: Sorry, no terminal at all requested - can't get input
I have followed: https://help.github.com/articles/generating-a-...
- 145