Questions tagged [gpg]
gpg is the main command line tool of the GNU Privacy Guard (GnuPG), implementing the OpenPGP standard for public key cryptography. It allows encryption, (verification of) signatures and trust models like the web of trust. gpg (and its library gpgme) are the base of many FOSS crypto applications (like mail user agents). There is a standalone version (1.x) and one (2.x) requiring gpg-agent for secret key handling.
699
questions
0
votes
0
answers
11
views
Export a GnuPG private key with a different passphrase?
What is the best way to export a private key from a GnuPG keychain, such that the exported key would be encrypted with a different passphrase than the one it's protected by in the keychain?
Ideally, I'...
- 5,201
0
votes
0
answers
12
views
Can't start gpg-agent for .gnupg folder stored inside a Veracrypt encrypted container
I have my .gnupg directory inside a USB drive encrypted with Veracrypt. Listing the public keys with the gpg --homedir <path-to-usb-gnupg-dir> --list-keys works properly, but problems arise when ...
- 1
0
votes
1
answer
50
views
dnf install self-signed package Error: GPG check FAILED
I have a repository and a package and want to install it from that repository on Fedora 39.
The repository is here for (testing purposes, ignore the bucket name ubuntu, it contains rpm repo) https://...
- 101
0
votes
0
answers
35
views
GPG signing failure
Running the commands
export GPG_TTY=$(tty)
git commit -S -m "message"
is resulting in failure to sign the key as the pin entry is still opening in the pop up window. Unusually this was ...
- 1
0
votes
0
answers
124
views
How to configure Termux APT repositories in Debian?
I'm interested to configure the Termux repositories on a Debian system. However I got stuck on some point. Any help would be appreciated.
Premise
My scenario is as follows. I have an Android device ...
- 101
0
votes
1
answer
81
views
Find an option other than --quiet to avoid GPG warning when a file is decrypted
GPG decrypt command
I'm try to decrypt a file by gpg and to do this I'm executing (with success) the following command:
gpg --passphrase "12345678" --batch --yes --no-symkey-cache filename....
- 247
1
vote
1
answer
54
views
How to increase GnuGPG passphrase dialog box timeout?
The GnuGPG passphrase prompt dialog box timesout after 60 seconds.
How do I increase the timeout period ?
(Just to clarify that I am not looking for default-cache-ttl but the timeout of the passphrase ...
- 287
0
votes
0
answers
33
views
Fail to Compile libgcrypt
libgpg-error-1.4.7 did install:
$ ls /opt/libgpg-error-1.47
bin include lib share
And I tried to configure libgcrypt-1.10.2:
$ ./configure --with-libgpg-error-prefix=/opt/libgpg-error-1.47
config....
- 213
0
votes
0
answers
23
views
gnupg encrypt not working with other public key
I'm using gnupg package and trying to encrypt and sign the csv file by encrypting other public keys (file receiver public key) and signing with my private key. But the file can't decrypt to other user ...
- 1
1
vote
1
answer
48
views
Debian apt, gpg keys and constant overwriting of signed-by
The apt-key has been depreciated. E.g. here they describe how to migrate to gpg keys. Great but it works for a month or so until the sources.list file gets overwritten. Why or how it gets overwritten, ...
- 521
0
votes
0
answers
44
views
Run gpg from systemd script
I wrote a wrapper for rsync. It connects to my host and makes a backup of my $HOME directory via ssh. I use gpg-agent for the ssh verification. My script works when called from a terminal emulator. It ...
- 23
1
vote
0
answers
49
views
How to export only some public sub-keys with gpg?
My PGP-key follows the long-lived-mainkey-short-time-subkeys pattern. Thus I already have 12 expired subkeys attached to my mainkey. When handing out my key today, there seems to be not much reason to ...
- 141
0
votes
1
answer
834
views
Problem with apt public keys in docker image building
I have problem after upgrading PHP image from 8.0 to PHP image 8.1 and on stackoverflow they sent me there
this is my dockerfile:
FROM php:8.1-apache AS apache
RUN a2enmod rewrite
WORKDIR /bin
...
2
votes
1
answer
81
views
Convert encrypted and signed to just signed PGP message
Suppose Bob got a message from Alice encrypted with his public key and signed with her private key. Now he wants to prove to Charlie that he got a message from her with this exact content. The message ...
- 23
2
votes
1
answer
225
views
Failed import of gpg key, gpg: no writable keyring found: Not Found
When I tried to import a gpg key in exported_key on a new computer with:
user@computer:~$ gpg --import exported_key
It returned :
gpg: no writable keyring found: Not found ...
- 131
0
votes
0
answers
81
views
Trying to add ppa repository to Debian fails with GPG error
I would like to install the package sile on Debian. It is available on Ubuntu as a PPA. I located the url and added it to my sources.list file. Then I updated. However sile was not downloadable due to ...
- 1
0
votes
0
answers
61
views
Duplicity encrypting to a strange key?
I'm trying to get duplicity working with gpg keys, but it's behaving a bit strange (on the actual machine that I want backed up, it seems better in virtual machines). Here's a complete set of commands ...
0
votes
0
answers
95
views
How to move GPG key to a different host? Errors on import
I am trying to move my GPG configuration from home to work PC. This is how I exported my keys:
sms@home-sms:~/Public$ gpg --list-keys
/home/sms/.gnupg/pubring.kbx
----------------------------
pub ...
- 101
0
votes
0
answers
66
views
issue to authenticate iso file
I downloaded an iso from alt.fedoraproject.org:
https://download.fedoraproject.org/pub/fedora/linux/releases/38/Everything/x86_64/iso/Fedora-Everything-netinst-x86_64-38-1.6.iso
then the checksum and ...
- 103
0
votes
0
answers
194
views
gpg to import keys from a keyserver into a file
Following up on How to import keys from a keyserver using gpg in debian?, which asked for importing keys from a keyserver using gpg into our own ~/.gnupg/pubring.kbx file,
but my question is asking ...
- 1,344
1
vote
1
answer
251
views
What is [AR] for gpg / gnupg authentication keys?
I used Dr Duh's yubikey setup about 20 days ago with no issue. I ran through it again last night on an M1 Mac with Brew and when we created the expiring authentication key, the keylist shows [AR] for ...
- 79
0
votes
0
answers
8
views
backing up gpg media choice?
I am finally doing what I should have does years ago and producing a paper and digital backup of my keys. The question is about the preferred media. I have had usb thumb drives go bad but never had ...
- 773
0
votes
0
answers
213
views
gpg not prompting a password for file decryption
I can encrypt a file with gpg 2.3.8, (not using keys), but I can't decrypt it.
[user@test ~]$ gpg -c tarredzip.tar.gz
That prompts for a password (I'm just using "test", so I get a warning ...
0
votes
0
answers
30
views
Swap out Yubikey with working one and signing git commit
I have a Yubikey 5C Nano that is replacing a Yubikey 4C Nano that all of a sudden stopped working. I want to sign my git commits with it. The 5C was set up on an Ubuntu Linux machine, and signs git ...
- 101
0
votes
1
answer
298
views
gpg cannot resove/connect to keyserver
Environment
OS is Artix Linux 6.0.11
GPG is 2.2.40
libcrypt is 1.10.2
keyserver is any (ubuntu , sks, mit, etc.)
Problem
I wanted to update my system via pacman -Syu and needed to import a key by ...
- 11
0
votes
1
answer
109
views
debian howto disable gpg-agent-browser.socket
On server there is no browser nore gui, so is it possible to disable the gpg-agent-browser.socket ?
On debian 10.13 I can see those files:
/usr/lib/systemd/user/gpg-agent.socket
/usr/lib/systemd/user/...
1
vote
0
answers
160
views
GPG fails to decrypt file with Yubikey private key: No secret key
I'm trying to decrypt a file using GPG. The private key is stored on my Yubikey, but I get the following message from GPG:
shell> gpg --output test-temp --decrypt git-token.gpg
gpg: encrypted with ...
- 11
0
votes
1
answer
98
views
apt-key: gpg: conversmon from '�t�-8' to &UTF-8' not evailable
If i run sudo apt-key adv --keyserver keyserver.ubuntu.com --recv-keys 1655A0AB68576280
i get gpg: conversmon from '�t�-8' to &UTF-8' not evailable. segmentation fault
(This is the original ...
- 11
3
votes
2
answers
4k
views
Can't upgrade Jenkins on Debian11, the public key is not available: NO_PUBKEY FCEF32E745F2C3D5
I try to upgrade jenkins.
I use the new way to use gpg keys:
wget https://pkg.jenkins.io/debian-stable/jenkins.io.key
gpg --dearmor jenkins.io.key
mv jenkins.io.key.gpg /usr/share/keyrings/jenkins-...
1
vote
1
answer
6k
views
Solving gpg: decryption failed: No secret key
I have encrypted a file through gpg ***.gpg --encrypt --recipient [email protected] ***
The hard disk with my Linux system where such file was encrypted has dead. I keep just the ***.gpg file in an ...
- 135
0
votes
0
answers
307
views
Issues with yum/dnf update and GPG check
When attempting to update my system/install new packages, I receive this error:
Problem opening package gstreamer1-plugins-bad-1.16.1-5.el8.x86_64.rpm
Problem opening package gstreamer1-plugins-ugly-1....
- 1
1
vote
1
answer
197
views
Accidentally deleted ~/.gnupg directory, Now couldn't get passwords with pass. Is it recoverable?
As title said, I accidentally deleted ~/.gnupg directory.
$ pass odysee
gpg: decryption failed: No secret key
I just want to access my password stored with pass.
Is it recoverable from this state?, ...
- 510
7
votes
1
answer
3k
views
repo.skype.com/deb/dists/stable/InRelease: Key is stored in legacy trusted.gpg keyring (/etc/apt/trusted.gpg), see the DEPRECATION
The following warning message appears during my apt-get update && apt-get upgrade procedure on Linux Mint 21:
W: https://repo.skype.com/deb/dists/stable/InRelease: Key is stored in legacy ...
- 28.3k
1
vote
1
answer
611
views
How to use a GPG key for SSH on macOS
Basically, my goal is to use a single key for everything. I have a GPG key that I imported onto my MacBook, and would like to use that key for SSH authentication. However, despite my several attempts, ...
1
vote
0
answers
59
views
How to remove authentication with gpg-agent/git-credentialmanager to pus to a public repo?
I have a azure devops repository which I have made public recently. Before it was private and I used the git credential manager and gpg-agent.
If I want to push my changes I will get the error:
$ git ...
- 11
0
votes
1
answer
439
views
GPG is missing secret key that is expected to be on an OpenPGP card (YubiKey 5)
Hoping the answer https://unix.stackexchange.com/a/613772/320598 will help, I found out that it did not After asking this question, I found a very similar question at https://stackoverflow.com/q/...
- 1,208
0
votes
0
answers
74
views
Slackware failed to load libcrypt.so.1 and slackpkg broken
Hello fellow Linux users,
I recently installed Slackware64-15.0 to a VM to try it out. I recently came across an error with running slapt-get after installing it. The program is complaining of a ...
1
vote
1
answer
256
views
Linux Mint: How to prevent Slack from re-inserting its key to apt-key
Since apt-key is now deprecated, I have exported and copied all of my package keys to the gpg folder and updated the corresponding /sources.list.d/* accordingly by adding the [signed-by=/usr/share/...
- 133
0
votes
0
answers
109
views
Microsoft public repository rpm downloads failed with gpgcheck enabled with reposync
I’m facing an issue to download the patches (rpm) from Microsoft public repository site with gpgcheck=1.
Repository site: https://packages.microsoft.com/rhel/7/prod/
To download all rpm I have ...
0
votes
0
answers
507
views
Pinentry-tty works with gpg but doesn't work with ssh/git
I have gpg-agent running by systemd unit with the following config:
❯ cat ~/.gnupg/gpg-agent.conf
enable-ssh-support
grab
default-cache-ttl 21600
default-cache-ttl-ssh 21600
pinentry-program /nix/...
- 133
0
votes
1
answer
94
views
EasyPG always asks to pick a gpg key even though epa-file-encrypt-to is set
I want emacs to use one specific key for encryption files. So, when I make a *.org.gpg file and save it, easypg should automatically transparently take the key and encrypt a buffer.
Instead, it asks ...
- 11
1
vote
1
answer
2k
views
Add the gpg key used to sign the packages by running the following wget | gpg | tee >/dev/null command
I was preparing my Kali Linux to run a Tor's Middle Relay. I was doing Tor Project's Repository configuration according to this site.
I made steps 1 and 2. The 3rd step was to add the gpg key used to ...
- 249
0
votes
0
answers
322
views
gpg: signing failed: No secret key when running under Jenkins
I am signing my files with the following command
sudo gpg --pinentry-mode loopback --passphrase-file /srv/mypassphrase --homedir /var/lib/jenkins/.gnupg --sign -r [email protected] -o myfile.sig myfile.tar
...
- 3,215
1
vote
0
answers
253
views
How to enable gpg password prompt for OAuth2 token in mutt
I am using mutt with outlook365 which has OAuth2 support.
I generated an access token which is checked by the following lines in my muttrc:
set imap_authenticators = "xoauth2"
set ...
- 11
2
votes
1
answer
582
views
Installing MS SQL Server on Debian 11 -- Repo Signature Problem
trying install MS SQL Server 2022 on Debian 11 is driving me crazy, as I'm not being able to add MS repo properly.
First of all, step-by-step guide by Microsoft -just for Ubuntu- in this page: https://...
- 21
0
votes
0
answers
58
views
How to generate keygrip for existing private/public keypair
I am trying to generate gpg key using existing private/public keypair (generated elsewhere with certificates so cannot change it).
For this tried option 13 in gpg --expert --full-generate-key command ...
1
vote
2
answers
2k
views
Suddenly a server refuses to 'apt update' because an 'Unknown error executing apt-key'
The problem
UPDATE: Currently investigating with strace. It seems problem is a HTTP 400 error when accessing the repository
UPDATE2: More weird errors in the server (a .so lib file corrupted, database ...
- 121
0
votes
1
answer
91
views
Determine if the gpg-agent cached credentials are still valid
In a shell script I would like to check if the gpg-agent has valid cached credentials or not. How can I do this?
- 733
8
votes
2
answers
2k
views
How do I get git to use the cli rather than some GUI application when asking for GPG password?
Whenever I try to create a signed git commit, I need to enter my GPG key. It spawns some GUI application to receive the password. It looked like the application was seahorse, so I uninstalled it, but ...
- 211
1
vote
2
answers
953
views
Batch move apt keys from trusted.gpg to folder, then add [signed-by=...] as needed
There's been this annoying deprecation of /etc/apt/trusted.gpg, even though putting the keys into trusted.gpg.d/ (which suppresses apt update warnings) doesn't actually help with security at all (for ...
- 584