Questions tagged [gpg-agent]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
53 views

What is the proper configuration for gpg, ssh, and gpg-agent to use GPG auth subkeys for SSH with pinentry in a multi-session tmux environment?

Context I would like to use GPG authentication subkeys instead of SSH keys. I would also like to use gpg-agent to manage password caching for these keys. I am running in a headless environment, so ...
0
votes
0answers
13 views

How to fix remote gpg agent when it stops working?

This is driving me crazy. I previously asked this: gpg-agent mysteriously stopped working - agent on remote system no longer connecting to ssh socket If I log out overnight everything will work when ...
0
votes
1answer
81 views

Recover lost ssh key still registered in gpg agent

I've been using a ssh key for a while by opening it using gpg agent. I do remember the gpg agent password, but I don't remember the ssh key. How could I recover the ssh key from the gpg agent?
0
votes
0answers
172 views

gpg-agent & systemd sockets not remembering passphrases

I see that gpg-agent can be managed using systemd's sockets. In particular, there are the following sockets are services: dirmngr.service dirmngr.socket gpg-agent-browser.socket gpg-agent-extra....
2
votes
1answer
285 views

“gpg-agent is older than us” warning message even after running gpgconf --kill all [closed]

I have installed gpg version 2.2.17 from source. When I run gpg --card-status gpg reports: gpg: WARNING: server 'gpg-agent' is older than us (2.2.4 < 2.2.17). gpg: Note: Outdated servers may ...
1
vote
2answers
140 views

apt says that I have a held broken package but this package doesn't exist

When I'm trying to install the gpg-agent package, I get an error The following packages have unmet dependencies: gpg-agent : Depends: libassuan0 (>= 2.5.1) but 2.4.3-2 is to be installed ...
2
votes
0answers
62 views

Why is StreamLocalBindUnlink disabled by default?

I want to enable GPG agent forwarding, and found that StreamLocalBindUnlink is disabled by default on sshd. Why is it disabled by default? Is there any security risk in enabling it? Since X11 ...
2
votes
1answer
140 views

SSH server accepts key, but signing fails

I have recently tried migrating from a standard ssh public key setup to managing my keys with GPG. Following instructions on my distribution's wiki, I set up ssh to use gpg-agent instead of the ...
0
votes
0answers
158 views

gpg-agent: can't connect to the SCdaemon: IPC connect call failed

syslog is getting filled every 2 seconds with: gpg-agent: can't connect to the SCdaemon: IPC connect call failed When I kill gpg-agent it respawns again. I am not really actively using gpg to ...
1
vote
2answers
421 views

gpg - gpg-preset-passphrase installation

Issue: - The passphrase is repeatedly being requested when I pass show <name of credential>. Doing some Googling, I found you can do that with gpg-preset-passphrase, however I'm not sure where ...
0
votes
2answers
54 views

Is it possible to reuse a GnuPG key in another installation?

I have a GPG key which I use to sign and submit packages to Launchpad. Is it possible to reuse that key in another installation, or do I always have to create a new key for the new installation of a ...
1
vote
0answers
84 views

How to forward GPG to a linux machine from Windows?

Here is my set up: Windows 10 machine, my desktop PC. Ubuntu 18 machine, this is my home server Yubikey, has my private GPG keys on it My work flow is as follows: Plug in my Yubikey into USB port ...
1
vote
1answer
112 views

Securely Piping String in Local Text File to Remote Command using SSH

The following takes place on Ubuntu 18. I need to automate the remote seeding of a gpg-agent with a passphrase stored in a file on my local machine using SSH. The passphrase needs to be handled in ...
2
votes
2answers
315 views

Where does GPG Agent store the passphrase — I need to restore it

I forgot my GPG key passphrase. I know my computer is storing it somewhere because I decrypt strings with it, without a password, for example: $ gpg --decrypt -r me@example.com ~/.password-store/...
-1
votes
1answer
346 views

GPG cache options don't work

There is an option named default-cache-ttl that controls how long the agent will remember the password to the private key. However, when I put it in the config file it doesn't work - instead, gpg ...
0
votes
1answer
494 views

gpg-agent is running, but I'm always prompted for password

When I run gpg2, I'm prompted for a password every time I use it. Based on my reading of the gpg-agent man pages, I should only be prompted the first time. gpg-agent is a daemon to manage secret (...
0
votes
0answers
344 views

GPG2 No Longer Caching

This just started happening a couple of days ago on Fedora 28. I want GPG to remember my private key passphrase so I can decrypt files without entering the passphrase every time. If I run gpg2 to ...
7
votes
1answer
64 views

How can I see queries to gpg-agent?

I am using gpg-agent together with a Yubikey to securely store my GPG keys. In addition I've enabled so that whenever a authentication, sign or decryption request happens I must physically push the ...
1
vote
1answer
2k views

How to solve gpg: bad data signature from key: KEY_ID Wrong key usage (0x19, 0x2)

I'm using Arch Linux Linux uplink 4.14.56-1-lts #1 SMP Tue Jul 17 20:11:42 CEST 2018 x86_64 GNU/Linux. I'm trying to solve a problem I'm currently have with GnuPG 2.2.9 (libgcrypt 1.8.3), but I've ...
1
vote
1answer
396 views

Controlling the lifetime of keys unlocked in a GnuPG agent

For (slightly) increased security, I would like to have better control of the lifetime of any unlocked keys, depending on the task being performed. Ideally, I would start an interactive sub-shell, do ...
0
votes
0answers
833 views

gpg: Sorry, no terminal at all requested - can't get input

I am trying to run the command: git secret reveal But I am getting error: gpg: Sorry, no terminal at all requested - can't get input I have followed: https://help.github.com/articles/generating-a-...
1
vote
0answers
204 views

How do I troubleshoot Pass — it is taking forever to unlock my gpg key

I'm using pass to manage/consolidate passwords, but it takes a very long time to even ask for my gpg passphrase. It can take up to 30 seconds, which doesn't sound like an eternity but it sure feels ...
1
vote
1answer
229 views

how to navigate with pinentry

I was was using gpg --gen-key till I got to enter the passphrase where I get: ┌──────────────────────────────────────────────────────┐ │ Please enter Passphrase, │ │ ...
2
votes
0answers
920 views

gpg-agent mysteriously stopped working - agent on remote system no longer connecting to ssh socket [closed]

I am using a yubikey nano on my local system to do encrypt/decrypt/sign on remote systems, plus SSH agent forwarding. I recall this being a bear to setup, but it has worked flawlessly for several ...
1
vote
0answers
205 views

How do I tell pass my GPG passphrase? [duplicate]

I'm trying to set up pass and hitting a bit of a wall. I generated a new gpg key with gpg --gen-key and then ran pass init 1E3C5C98 where 1E3C5C98 is the ID for my new key, at least as I understand it....
3
votes
0answers
557 views

Can't sign/encrypt unless I start gpg-agent manually

I recently set up Ubuntu in a VM for development work, but found that git couldn't sign my commits. Investigating further, I found that gpg-agent wasn't able to request my passphrase via pinentry-...
2
votes
0answers
648 views

S.gpg-agent.browser not found in Debian stretch while adding ppa

I do not know about S.gpg-agent.browser error while adding ppa repository. Can I get more information for solve this? add-apt-repository ppa:webupd8team/java (or another repository) gpg: keybox '/...
3
votes
0answers
523 views

How can I suppress the pinentry dialogue box if there is no gpg password?

I'm using (neo)mutt with GPG. I've set my gpg password to empty, but when I attempt to decrypt an incoming email, mutt still presents a pinentry dialogue box. If I just press Enter (with no string), ...
5
votes
0answers
4k views

S.gpg-agent.browser not found while adding ppa in debian

I am using debian strech. I try to add repostory for vim with python support , while adding I encountered gpg-agent.browser not found error sudo add-apt-repository ppa:pi-rho/dev [sudo] password ...
11
votes
2answers
8k views

gpg-agent refuses SSH keys with ssh-add reporting “agent refused operation”

I'm using openssh7.5p1 and gnupg 2.1.21 on arch linux (these are the default versions that come with arch). I would like to use gpg-agent as an ssh agent. I put the following in my ~/.gnupg/gpg-...
2
votes
0answers
551 views

GnuPG 2.1.20 ssh agent forwarding with yubikey on OSX fails

Tried out ProxyJump as suggested by @JensErat. I configured it like this in ssh config: Host jump-to-server HostName server.hostname ProxyJump ubuntu@jump.hostname User ubuntu But it does not work, ...
1
vote
1answer
207 views

How to produce a printable PGP detached signature (eventually in base16)?

Given a detached signature mydoc.sig of a document mydoc produced with gpg --local-user <GPG_RECIPIENT> --detach-sig mydoc How can I create a printable output of this signature in base16 (as ...
0
votes
1answer
57 views

Why are gpg key options not displayed when generating a key?

I want to generate a GPG key interactively in expert mode. gpg --expert --gen-key I only have the name, email and a prompt for a passphrase, no key size, key type, etc., why would it be so?
2
votes
1answer
3k views

How to make the default-cache-ttl option of gpg-agent work?

I use pass as a password manager. I would like my passphrase to be cached during a certain amount of time to avoid retyping my passphrase every time that I want to clip one of my passwords. Pass is ...
0
votes
1answer
967 views

Using GPG-agent, the ssh-agent does not show the keys using “ssh-add -l”

I've been trying to get a yubikey to work as an authentication method for remote connections via ssh using this guide. I got the gpg2 set up nicely, and I can see that i've loaded the key onto the ...
2
votes
2answers
3k views

How to shutdown and restart dirmngr?

dirmngr is used by python-apt and is recommended by gnupg and gpgsm. I tried to shutdown dirmngr as shared in the manpage but got this - └─[$] dirmngr -vv --shutdown dirmngr[9494]: error opening '/...
2
votes
1answer
287 views

GPG passphrase change ineffective

I've changed a passphrase for a secret key: $ gpg --edit-key <PUBKEY_ID> passwd <old_passphrase> <new_passphrase> <new_passphrase> save Reloaded using gpgconf --reload, ...
1
vote
2answers
1k views

gpg2 pinentry fails without X

What is working My gpg-agent pinentry works fine under X. I can run echo "test" | gpg2 -ase --default-recipient-self | gpg2 to cache my passwords and later run killall gpg-agent -1 to flush them. ...
5
votes
0answers
494 views

Intermingled input when using local gpg-agent from remote site

I'm starting a local gpg-agent on my Mac, with the extra-socket option. Then I connect to a remote site using SSH, forwarding the remote S.gpg-agent socket to the local S.gpg-agent.extra socket. This ...
3
votes
0answers
199 views

How to run keychain from gdm ?

I have keychain manage both ssh-agent and gpg-agent. It's working from a shell, with a line like: eval `keychain --eval --agents ssh,gpg id_rsa my_gpg_key` in ~/.bash_profile. I'd like to have ...
8
votes
2answers
4k views

What are the steps needed to cache passphrases entered via pinentry using gpg-preset-passphrase in 2.1.15?

I'm seeking to cache passphrases for use on an unattended machine. As doing this poses some risk, I'd prefer choosing which passphrases get cached and avoid setting both default-cache-ttl and max-...
3
votes
1answer
716 views

Why does gpg ask for password even with gpg-agent?

I started gpg-agent as follows: eval `gpg-agent --daemon --preset` and in this terminal window, used the gpg-preset-passphrase command as recommended: echo secretpassword | /usr/libexec/gpg-preset-...
4
votes
2answers
8k views

Make GPG Agent Permanently Store Passphrase

I recently got GPG setup on my Mac: brew install gpg; brew install gpg-agent; And generated a key pair with a passphrase. I added use-agent to my ~/.gnupg/gpg.conf and allow-preset-passphrase to ~/....
3
votes
1answer
100 views

Custom cache duration for specific keys?

I want to configure gpg-agent to cache a specific key for a set duration longer than other keys in my keyring. Is there a way to configure gpg-agent to set key caching duration for specific keys?
0
votes
1answer
503 views

Configure Duplicity to use pinentry?

Duplicity by default asks for passwords to GnuPG keys on start up and caches them in memory throughout process lifetime. Is there a way to have it use /usr/bin/pinentry instead so I know I'm not ...
2
votes
1answer
453 views

Systemd Service for Offlineimap + gpg encrypted PW's inside tmux works manually after system start but not autmoatically

Short description, what i'm searching for: I want to have a detached tmux session automatically started as a systemd user service. Inside that, offlineimap should start and decrypt my login ...
1
vote
1answer
1k views

Problem configuring GPG pinentry

I have two hosts, A and B. On A I have the gpg pinentry program setup to be pinentry-curses but I have no idea how I did it anymore. I can not seem to find the difference between A and B, but on A (...
1
vote
0answers
949 views

keychain can't add gpg key

I'm setting up keychain to manage gpg-agent, with keychain --eval --agents gpg MYGPGKEY I get the following: * keychain 2.8.1 ~ http://www.funtoo.org * Starting gpg-agent... * Adding 1 gpg key(s):...
1
vote
0answers
418 views

gpg-agent problems on Manjaro Linux (KDE)

Recently Github announced support for signed commits, so I configured Git: git config --global user.signingkey F03CB372 git config --global commit.gpgsign true I already had a GPG key F03CB372, ...
0
votes
1answer
458 views

How to configure gpg-agent to work correctly with obnam?

I'm trying to set up the de-duplicating backup program obnam so that it backups encrypted chunks on a remote server (raspberry pi B3 through ssh with USB hard drive) but can't get it even starting to ...