Questions tagged [gpg-agent]
The gpg-agent tag has no usage guidance.
0
votes
2answers
11 views
Is it possible to reuse a GnuPG key in another installation?
I have a GPG key which I use to sign and submit packages to Launchpad.
Is it possible to reuse that key in another installation, or do I always have to create a new key for the new installation of a ...
0
votes
0answers
12 views
How to forward GPG to a linux machine from Windows?
Here is my set up:
Windows 10 machine, my desktop PC.
Ubuntu 18 machine, this is my home server
Yubikey, has my private GPG keys on it
My work flow is as follows:
Plug in my Yubikey into USB port ...
1
vote
1answer
62 views
Securely Piping String in Local Text File to Remote Command using SSH
The following takes place on Ubuntu 18.
I need to automate the remote seeding of a gpg-agent with a passphrase stored in a file on my local machine using SSH.
The passphrase needs to be handled in ...
0
votes
0answers
9 views
GPG: multiple [A] subkey services
In case I have two git public repo like gitlab, github and each using different gpg authen subkey.
I'd like to have two systemd user level service gpg-agent that cache passpharse of each subkey, the ...
2
votes
1answer
73 views
Where does GPG Agent store the passphrase — I need to restore it
I forgot my GPG key passphrase.
I know my computer is storing it somewhere because I decrypt strings with it, without a password, for example:
$ gpg --decrypt -r me@example.com ~/.password-store/...
-1
votes
1answer
30 views
GPG cache options don't work
There is an option named default-cache-ttl that controls how long the agent will remember the password to the private key. However, when I put it in the config file it doesn't work - instead, gpg ...
0
votes
1answer
164 views
gpg-agent is running, but I'm always prompted for password
When I run gpg2, I'm prompted for a password every time I use it.
Based on my reading of the gpg-agent man pages, I should only be
prompted the first time.
gpg-agent is a daemon to manage secret (...
0
votes
0answers
106 views
GPG2 No Longer Caching
This just started happening a couple of days ago on Fedora 28. I want GPG to remember my private key passphrase so I can decrypt files without entering the passphrase every time.
If I run gpg2 to ...
4
votes
0answers
39 views
How can I see queries to gpg-agent?
I am using gpg-agent together with a Yubikey to securely store my GPG keys. In addition I've enabled so that whenever a authentication, sign or decryption request happens I must physically push the ...
1
vote
1answer
1k views
How to solve gpg: bad data signature from key: KEY_ID Wrong key usage (0x19, 0x2)
I'm using Arch Linux Linux uplink 4.14.56-1-lts #1 SMP Tue Jul 17 20:11:42 CEST 2018 x86_64 GNU/Linux. I'm trying to solve a problem I'm currently have with GnuPG 2.2.9 (libgcrypt 1.8.3), but I've ...
1
vote
1answer
229 views
Controlling the lifetime of keys unlocked in a GnuPG agent
For (slightly) increased security, I would like to have better control of the lifetime of any unlocked keys, depending on the task being performed. Ideally, I would start an interactive sub-shell, do ...
0
votes
0answers
41 views
prevent gpg-agent from starting unless through socket
gpg-agent can be started though socket activation and
by forking on demand. I would like to prevent the latter
from happening. The agent should only be launched by
systemd upon socket activity without ...
0
votes
0answers
50 views
using pinentry with keepassx
I have a password manager so that I only need to remember one very strong password and still can use a new very strong password for each program that needs one.
One of the programs is GPG, so I would ...
0
votes
0answers
515 views
gpg: Sorry, no terminal at all requested - can't get input
I am trying to run the command:
git secret reveal
But I am getting error: gpg: Sorry, no terminal at all requested - can't get input
I have followed: https://help.github.com/articles/generating-a-...
0
votes
0answers
94 views
How do I troubleshoot Pass — it is taking forever to unlock my gpg key
I'm using pass to manage/consolidate passwords, but it takes a very long time to even ask for my gpg passphrase. It can take up to 30 seconds, which doesn't sound like an eternity but it sure feels ...
0
votes
1answer
153 views
how to navigate with pinentry
I was was using gpg --gen-key till I got to enter the passphrase where I get:
┌──────────────────────────────────────────────────────┐
│ Please enter Passphrase, │
│ ...
2
votes
0answers
576 views
gpg-agent mysteriously stopped working - agent on remote system no longer connecting to ssh socket [closed]
I am using a yubikey nano on my local system to do encrypt/decrypt/sign on remote systems, plus SSH agent forwarding. I recall this being a bear to setup, but it has worked flawlessly for several ...
1
vote
0answers
126 views
How do I tell pass my GPG passphrase? [duplicate]
I'm trying to set up pass and hitting a bit of a wall. I generated a new gpg key with gpg --gen-key and then ran pass init 1E3C5C98 where 1E3C5C98 is the ID for my new key, at least as I understand it....
0
votes
0answers
500 views
GPG Password Caching is Not Working After Two Hours
GPG password caching is not working after default 2 hrs period. Recently we have migrated a server to new hardware. New Server is on centos 7.3 and GPG version is 2.0.22.
We have copied entire ~user/...
3
votes
0answers
370 views
Can't sign/encrypt unless I start gpg-agent manually
I recently set up Ubuntu in a VM for development work, but found that git couldn't sign my commits. Investigating further, I found that gpg-agent wasn't able to request my passphrase via pinentry-...
2
votes
0answers
527 views
S.gpg-agent.browser not found in Debian stretch while adding ppa
I do not know about S.gpg-agent.browser error while adding ppa repository.
Can I get more information for solve this?
add-apt-repository ppa:webupd8team/java (or another repository)
gpg: keybox '/...
2
votes
0answers
335 views
How can I suppress the pinentry dialogue box if there is no gpg password?
I'm using (neo)mutt with GPG. I've set my gpg password to empty, but when I attempt to decrypt an incoming email, mutt still presents a pinentry dialogue box. If I just press Enter (with no string), ...
3
votes
0answers
3k views
S.gpg-agent.browser not found while adding ppa in debian
I am using debian strech. I try to add repostory for vim with python support , while adding I encountered gpg-agent.browser not found error
sudo add-apt-repository ppa:pi-rho/dev
[sudo] password ...
8
votes
2answers
5k views
gpg-agent refuses SSH keys with ssh-add reporting “agent refused operation”
I'm using openssh7.5p1 and gnupg 2.1.21 on arch linux (these are the default versions that come with arch). I would like to use gpg-agent as an ssh agent. I put the following in my ~/.gnupg/gpg-...
3
votes
0answers
470 views
GnuPG 2.1.20 ssh agent forwarding with yubikey on OSX fails
Tried out ProxyJump as suggested by @JensErat.
I configured it like this in ssh config:
Host jump-to-server
HostName server.hostname
ProxyJump ubuntu@jump.hostname
User ubuntu
But it does not work, ...
1
vote
1answer
129 views
How to produce a printable PGP detached signature (eventually in base16)?
Given a detached signature mydoc.sig of a document mydoc produced with
gpg --local-user <GPG_RECIPIENT> --detach-sig mydoc
How can I create a printable output of this signature in base16 (as ...
0
votes
1answer
40 views
Why are gpg key options not displayed when generating a key?
I want to generate a GPG key interactively in expert mode.
gpg --expert --gen-key
I only have the name, email and a prompt for a passphrase, no key size, key type, etc., why would it be so?
2
votes
1answer
2k views
How to make the default-cache-ttl option of gpg-agent work?
I use pass as a password manager. I would
like my passphrase to be cached during a certain amount of time to avoid
retyping my passphrase every time that I want to clip one of my passwords.
Pass is ...
0
votes
1answer
738 views
Using GPG-agent, the ssh-agent does not show the keys using “ssh-add -l”
I've been trying to get a yubikey to work as an authentication method for remote connections via ssh using this guide. I got the gpg2 set up nicely, and I can see that i've loaded the key onto the ...
2
votes
2answers
2k views
How to shutdown and restart dirmngr?
dirmngr is used by python-apt and is recommended by gnupg and gpgsm. I tried to shutdown dirmngr as shared in the manpage but got this -
└─[$] dirmngr -vv --shutdown
dirmngr[9494]: error opening '/...
2
votes
1answer
218 views
GPG passphrase change ineffective
I've changed a passphrase for a secret key:
$ gpg --edit-key <PUBKEY_ID>
passwd
<old_passphrase>
<new_passphrase>
<new_passphrase>
save
Reloaded using gpgconf --reload, ...
1
vote
1answer
904 views
gpg2 pinentry fails without X
What is working
My gpg-agent pinentry works fine under X. I can run
echo "test" | gpg2 -ase --default-recipient-self | gpg2
to cache my passwords and later run killall gpg-agent -1 to flush them.
...
3
votes
0answers
366 views
Intermingled input when using local gpg-agent from remote site
I'm starting a local gpg-agent on my Mac, with the extra-socket option. Then I connect to a remote site using SSH, forwarding the remote S.gpg-agent socket to the local S.gpg-agent.extra socket. This ...
0
votes
0answers
1k views
gpg: error creating passphrase: Operation cancelled
I compiled gnupg-2.1.15 on CentOS6.5
Once compilation is done it's working fine on same host.
But if I move binaries and libraries to remote host and try to use gpg it's giving below error.
gpg: ...
4
votes
0answers
167 views
How to run keychain from gdm ?
I have keychain manage both ssh-agent and gpg-agent. It's working from a shell, with a line like:
eval `keychain --eval --agents ssh,gpg id_rsa my_gpg_key`
in ~/.bash_profile.
I'd like to have ...
6
votes
1answer
2k views
What are the steps needed to cache passphrases entered via pinentry using gpg-preset-passphrase in 2.1.15?
I'm seeking to cache passphrases for use on an unattended machine. As doing this poses some risk, I'd prefer choosing which passphrases get cached and avoid setting both default-cache-ttl and max-...
2
votes
1answer
567 views
Why does gpg ask for password even with gpg-agent?
I started gpg-agent as follows:
eval `gpg-agent --daemon --preset`
and in this terminal window, used the gpg-preset-passphrase command as recommended:
echo secretpassword | /usr/libexec/gpg-preset-...
4
votes
2answers
6k views
Make GPG Agent Permanently Store Passphrase
I recently got GPG setup on my Mac:
brew install gpg;
brew install gpg-agent;
And generated a key pair with a passphrase.
I added use-agent to my ~/.gnupg/gpg.conf and allow-preset-passphrase to ~/....
3
votes
1answer
82 views
Custom cache duration for specific keys?
I want to configure gpg-agent to cache a specific key for a set duration longer than other keys in my keyring.
Is there a way to configure gpg-agent to set key caching duration for specific keys?
0
votes
1answer
437 views
Configure Duplicity to use pinentry?
Duplicity by default asks for passwords to GnuPG keys on start up and caches them in memory throughout process lifetime. Is there a way to have it use /usr/bin/pinentry instead so I know I'm not ...
2
votes
1answer
391 views
Systemd Service for Offlineimap + gpg encrypted PW's inside tmux works manually after system start but not autmoatically
Short description, what i'm searching for:
I want to have a detached tmux session automatically started as a systemd user service. Inside that, offlineimap should start and decrypt my login ...
1
vote
1answer
1k views
Problem configuring GPG pinentry
I have two hosts, A and B. On A I have the gpg pinentry program setup to be pinentry-curses but I have no idea how I did it anymore. I can not seem to find the difference between A and B, but on A (...
1
vote
0answers
816 views
keychain can't add gpg key
I'm setting up keychain to manage gpg-agent, with
keychain --eval --agents gpg MYGPGKEY
I get the following:
* keychain 2.8.1 ~ http://www.funtoo.org
* Starting gpg-agent...
* Adding 1 gpg key(s):...
1
vote
0answers
276 views
gpg-agent problems on Manjaro Linux (KDE)
Recently Github announced support for signed commits, so I configured Git:
git config --global user.signingkey F03CB372
git config --global commit.gpgsign true
I already had a GPG key F03CB372, ...
0
votes
1answer
385 views
How to configure gpg-agent to work correctly with obnam?
I'm trying to set up the de-duplicating backup program obnam so that it backups encrypted chunks on a remote server (raspberry pi B3 through ssh with USB hard drive) but can't get it even starting to ...
2
votes
2answers
544 views
Why does mutt hang when running gpg in tmux?
I run mutt in tmux and when I run gpg to sign or encrypt, gpg shows a blank screen where I would expect to type my passphrase. I've straced gpg and it shows that it's hanging waiting on a socket read()...
15
votes
1answer
4k views
Gentoo Linux GPG encrypts properly a file passed through parameter but throws “Inappropriate ioctl for device” when reading from standard input
I am running Gentoo Hardened with kernel 4.1.7-hardened-r1 and I am trying to encrypt a file using GPG from a shell session opened from SSH and with the DISPLAY variable disabled in order to use ...
4
votes
1answer
2k views
gpg-agent instead of ssh-agent
I have a Yubikey 4 and I want to use my GPG keys stored on this to authenticate to SSH servers.I want to use GitHub for a start. I have already added my GPG authentication key to GitHub.
My problem ...
2
votes
2answers
1k views
Pass, how to cache passphrase
I'm started to use unix password manager Pass
Some passwords are not critical to me and I'm using them very often
So it's became very annoying to me to type passphrase to get some password.
Is ...
6
votes
2answers
2k views
Change pinentry program temporarily with gpg-agent
I use gpg-agent sometimes with no X display or over ssh, so my config file contains:
pinentry-program /usr/bin/pinentry-curses
This way, the gpg passphrase is requested in curses.
That said, in ...
