Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [gpg-agent]

The tag has no usage guidance.

0
votes
0answers
13 views

gpg-agent fails in mysterious way

I start gpg-agent.service with option --homedir to use my authen subkey, restart on-failure, gpg-agent work well, but if when I do push/pull/clone on remote repo, when gpg's asking for passphrase with ...
0
votes
0answers
6 views

GPG: multiple [A] subkey services

In case I have two git public repo like gitlab, github and each using different gpg authen subkey. I'd like to have two systemd user level service gpg-agent that cache passpharse of each subkey, the ...
0
votes
0answers
29 views

gpg-agent enforce key order with multiple ssh keys

I have two SSH keys (one GPG key with the authentication capability on a smartcard and one standard ssh key). When I try to to connect to a server that accepts both keys, gpg-agent wants to use the ...
2
votes
1answer
47 views

Where does GPG Agent store the passphrase — I need to restore it

I forgot my GPG key passphrase. I know my computer is storing it somewhere because I decrypt strings with it, without a password, for example: $ gpg --decrypt -r me@example.com ~/.password-store/...
-1
votes
1answer
16 views

GPG cache options don't work

There is an option named default-cache-ttl that controls how long the agent will remember the password to the private key. However, when I put it in the config file it doesn't work - instead, gpg ...
0
votes
1answer
46 views

gpg-agent is running, but I'm always prompted for password

When I run gpg2, I'm prompted for a password every time I use it. Based on my reading of the gpg-agent man pages, I should only be prompted the first time. gpg-agent is a daemon to manage secret (...
0
votes
0answers
59 views

GPG2 No Longer Caching

This just started happening a couple of days ago on Fedora 28. I want GPG to remember my private key passphrase so I can decrypt files without entering the passphrase every time. If I run gpg2 to ...
4
votes
0answers
36 views

How can I see queries to gpg-agent?

I am using gpg-agent together with a Yubikey to securely store my GPG keys. In addition I've enabled so that whenever a authentication, sign or decryption request happens I must physically push the ...
1
vote
1answer
1k views

How to solve gpg: bad data signature from key: KEY_ID Wrong key usage (0x19, 0x2)

I'm using Arch Linux Linux uplink 4.14.56-1-lts #1 SMP Tue Jul 17 20:11:42 CEST 2018 x86_64 GNU/Linux. I'm trying to solve a problem I'm currently have with GnuPG 2.2.9 (libgcrypt 1.8.3), but I've ...
1
vote
1answer
186 views

Controlling the lifetime of keys unlocked in a GnuPG agent

For (slightly) increased security, I would like to have better control of the lifetime of any unlocked keys, depending on the task being performed. Ideally, I would start an interactive sub-shell, do ...
0
votes
0answers
40 views

prevent gpg-agent from starting unless through socket

gpg-agent can be started though socket activation and by forking on demand. I would like to prevent the latter from happening. The agent should only be launched by systemd upon socket activity without ...
0
votes
0answers
49 views

using pinentry with keepassx

I have a password manager so that I only need to remember one very strong password and still can use a new very strong password for each program that needs one. One of the programs is GPG, so I would ...
0
votes
0answers
448 views

gpg: Sorry, no terminal at all requested - can't get input

I am trying to run the command: git secret reveal But I am getting error: gpg: Sorry, no terminal at all requested - can't get input I have followed: https://help.github.com/articles/generating-a-...
0
votes
0answers
78 views

How do I troubleshoot Pass — it is taking forever to unlock my gpg key

I'm using pass to manage/consolidate passwords, but it takes a very long time to even ask for my gpg passphrase. It can take up to 30 seconds, which doesn't sound like an eternity but it sure feels ...
0
votes
1answer
137 views

how to navigate with pinentry

I was was using gpg --gen-key till I got to enter the passphrase where I get: ┌──────────────────────────────────────────────────────┐ │ Please enter Passphrase, │ │ ...
1
vote
0answers
502 views

gpg-agent mysteriously stopped working - agent on remote system no longer connecting to ssh socket [closed]

I am using a yubikey nano on my local system to do encrypt/decrypt/sign on remote systems, plus SSH agent forwarding. I recall this being a bear to setup, but it has worked flawlessly for several ...
1
vote
0answers
111 views

How do I tell pass my GPG passphrase? [duplicate]

I'm trying to set up pass and hitting a bit of a wall. I generated a new gpg key with gpg --gen-key and then ran pass init 1E3C5C98 where 1E3C5C98 is the ID for my new key, at least as I understand it....
0
votes
0answers
454 views

GPG Password Caching is Not Working After Two Hours

GPG password caching is not working after default 2 hrs period. Recently we have migrated a server to new hardware. New Server is on centos 7.3 and GPG version is 2.0.22. We have copied entire ~user/...
3
votes
0answers
327 views

Can't sign/encrypt unless I start gpg-agent manually

I recently set up Ubuntu in a VM for development work, but found that git couldn't sign my commits. Investigating further, I found that gpg-agent wasn't able to request my passphrase via pinentry-...
2
votes
0answers
448 views

S.gpg-agent.browser not found in Debian stretch while adding ppa

I do not know about S.gpg-agent.browser error while adding ppa repository. Can I get more information for solve this? add-apt-repository ppa:webupd8team/java (or another repository) gpg: keybox '/...
1
vote
0answers
288 views

How can I suppress the pinentry dialogue box if there is no gpg password?

I'm using (neo)mutt with GPG. I've set my gpg password to empty, but when I attempt to decrypt an incoming email, mutt still presents a pinentry dialogue box. If I just press Enter (with no string), ...
3
votes
0answers
3k views

S.gpg-agent.browser not found while adding ppa in debian

I am using debian strech. I try to add repostory for vim with python support , while adding I encountered gpg-agent.browser not found error sudo add-apt-repository ppa:pi-rho/dev [sudo] password ...
5
votes
1answer
4k views

gpg-agent refuses SSH keys with ssh-add reporting “agent refused operation”

I'm using openssh7.5p1 and gnupg 2.1.21 on arch linux (these are the default versions that come with arch). I would like to use gpg-agent as an ssh agent. I put the following in my ~/.gnupg/gpg-...
3
votes
0answers
435 views

GnuPG 2.1.20 ssh agent forwarding with yubikey on OSX fails

Tried out ProxyJump as suggested by @JensErat. I configured it like this in ssh config: Host jump-to-server HostName server.hostname ProxyJump ubuntu@jump.hostname User ubuntu But it does not work, ...
1
vote
1answer
111 views

How to produce a printable PGP detached signature (eventually in base16)?

Given a detached signature mydoc.sig of a document mydoc produced with gpg --local-user <GPG_RECIPIENT> --detach-sig mydoc How can I create a printable output of this signature in base16 (as ...
0
votes
1answer
39 views

Why are gpg key options not displayed when generating a key?

I want to generate a GPG key interactively in expert mode. gpg --expert --gen-key I only have the name, email and a prompt for a passphrase, no key size, key type, etc., why would it be so?
2
votes
1answer
2k views

How to make the default-cache-ttl option of gpg-agent work?

I use pass as a password manager. I would like my passphrase to be cached during a certain amount of time to avoid retyping my passphrase every time that I want to clip one of my passwords. Pass is ...
0
votes
1answer
666 views

Using GPG-agent, the ssh-agent does not show the keys using “ssh-add -l”

I've been trying to get a yubikey to work as an authentication method for remote connections via ssh using this guide. I got the gpg2 set up nicely, and I can see that i've loaded the key onto the ...
2
votes
2answers
2k views

How to shutdown and restart dirmngr?

dirmngr is used by python-apt and is recommended by gnupg and gpgsm. I tried to shutdown dirmngr as shared in the manpage but got this - └─[$] dirmngr -vv --shutdown dirmngr[9494]: error opening '/...
2
votes
1answer
192 views

GPG passphrase change ineffective

I've changed a passphrase for a secret key: $ gpg --edit-key <PUBKEY_ID> passwd <old_passphrase> <new_passphrase> <new_passphrase> save Reloaded using gpgconf --reload, ...
1
vote
1answer
838 views

gpg2 pinentry fails without X

What is working My gpg-agent pinentry works fine under X. I can run echo "test" | gpg2 -ase --default-recipient-self | gpg2 to cache my passwords and later run killall gpg-agent -1 to flush them. ...
3
votes
0answers
339 views

Intermingled input when using local gpg-agent from remote site

I'm starting a local gpg-agent on my Mac, with the extra-socket option. Then I connect to a remote site using SSH, forwarding the remote S.gpg-agent socket to the local S.gpg-agent.extra socket. This ...
0
votes
0answers
1k views

gpg: error creating passphrase: Operation cancelled

I compiled gnupg-2.1.15 on CentOS6.5 Once compilation is done it's working fine on same host. But if I move binaries and libraries to remote host and try to use gpg it's giving below error. gpg: ...
4
votes
0answers
158 views

How to run keychain from gdm ?

I have keychain manage both ssh-agent and gpg-agent. It's working from a shell, with a line like: eval `keychain --eval --agents ssh,gpg id_rsa my_gpg_key` in ~/.bash_profile. I'd like to have ...
6
votes
1answer
2k views

What are the steps needed to cache passphrases entered via pinentry using gpg-preset-passphrase in 2.1.15?

I'm seeking to cache passphrases for use on an unattended machine. As doing this poses some risk, I'd prefer choosing which passphrases get cached and avoid setting both default-cache-ttl and max-...
2
votes
1answer
527 views

Why does gpg ask for password even with gpg-agent?

I started gpg-agent as follows: eval `gpg-agent --daemon --preset` and in this terminal window, used the gpg-preset-passphrase command as recommended: echo secretpassword | /usr/libexec/gpg-preset-...
4
votes
2answers
5k views

Make GPG Agent Permanently Store Passphrase

I recently got GPG setup on my Mac: brew install gpg; brew install gpg-agent; And generated a key pair with a passphrase. I added use-agent to my ~/.gnupg/gpg.conf and allow-preset-passphrase to ~/....
3
votes
1answer
72 views

Custom cache duration for specific keys?

I want to configure gpg-agent to cache a specific key for a set duration longer than other keys in my keyring. Is there a way to configure gpg-agent to set key caching duration for specific keys?
0
votes
1answer
412 views

Configure Duplicity to use pinentry?

Duplicity by default asks for passwords to GnuPG keys on start up and caches them in memory throughout process lifetime. Is there a way to have it use /usr/bin/pinentry instead so I know I'm not ...
2
votes
1answer
376 views

Systemd Service for Offlineimap + gpg encrypted PW's inside tmux works manually after system start but not autmoatically

Short description, what i'm searching for: I want to have a detached tmux session automatically started as a systemd user service. Inside that, offlineimap should start and decrypt my login ...
1
vote
1answer
977 views

Problem configuring GPG pinentry

I have two hosts, A and B. On A I have the gpg pinentry program setup to be pinentry-curses but I have no idea how I did it anymore. I can not seem to find the difference between A and B, but on A (...
1
vote
0answers
780 views

keychain can't add gpg key

I'm setting up keychain to manage gpg-agent, with keychain --eval --agents gpg MYGPGKEY I get the following: * keychain 2.8.1 ~ http://www.funtoo.org * Starting gpg-agent... * Adding 1 gpg key(s):...
1
vote
0answers
248 views

gpg-agent problems on Manjaro Linux (KDE)

Recently Github announced support for signed commits, so I configured Git: git config --global user.signingkey F03CB372 git config --global commit.gpgsign true I already had a GPG key F03CB372, ...
0
votes
1answer
360 views

How to configure gpg-agent to work correctly with obnam?

I'm trying to set up the de-duplicating backup program obnam so that it backups encrypted chunks on a remote server (raspberry pi B3 through ssh with USB hard drive) but can't get it even starting to ...
2
votes
2answers
505 views

Why does mutt hang when running gpg in tmux?

I run mutt in tmux and when I run gpg to sign or encrypt, gpg shows a blank screen where I would expect to type my passphrase. I've straced gpg and it shows that it's hanging waiting on a socket read()...
15
votes
1answer
3k views

Gentoo Linux GPG encrypts properly a file passed through parameter but throws “Inappropriate ioctl for device” when reading from standard input

I am running Gentoo Hardened with kernel 4.1.7-hardened-r1 and I am trying to encrypt a file using GPG from a shell session opened from SSH and with the DISPLAY variable disabled in order to use ...
4
votes
1answer
2k views

gpg-agent instead of ssh-agent

I have a Yubikey 4 and I want to use my GPG keys stored on this to authenticate to SSH servers.I want to use GitHub for a start. I have already added my GPG authentication key to GitHub. My problem ...
2
votes
2answers
972 views

Pass, how to cache passphrase

I'm started to use unix password manager Pass Some passwords are not critical to me and I'm using them very often So it's became very annoying to me to type passphrase to get some password. Is ...
6
votes
2answers
2k views

Change pinentry program temporarily with gpg-agent

I use gpg-agent sometimes with no X display or over ssh, so my config file contains: pinentry-program /usr/bin/pinentry-curses This way, the gpg passphrase is requested in curses. That said, in ...
8
votes
1answer
402 views

Using gpg-agent-connect tool reconstruct the ssh private key file

I have lost access to my ~/.ssh/id_dsa file (OpenSSH private key file in DSA algorithm), due to forgetting the passphrase. But, originally, I have had it imported into gpg-agent and protected it ...