Questions tagged [pgp]
The pgp tag has no usage guidance.
62
questions
0
votes
1answer
12 views
key signing: can't see new signatures
I'm getting a few friends to sign my key. Each time they've signed my key, if they send the signed key to a key server, when I try to get the signatures with gpg --refresh-keys --keyserver some....
1
vote
1answer
12 views
Unknown validity despite having signed the key myself
The key currently has an unknown validity:
$ gpg --edit-key some.user
pub rsa4096/FAC6C35BDFF9359A
created: 2020-03-01 expires: 2022-03-01 usage: SC
trust: full validity: ...
1
vote
1answer
396 views
Author's GPG subkey has expired, what can I do?
I am trying to download an update for a piece of software, and my package manager says that the key is invalid and thus warns me.
W: Failed to fetch https://deb.torproject.org/torproject.org/dists/...
0
votes
1answer
23 views
How to allow anonymous access to create objects in LDAP subtree?
I'm having a hard time trying to populate an LDAP with PGP keys. I have set up my LDAP (OpenLDAP if that matters) for a PGP key server structure as explained here which worked well so far.
Now I want ...
0
votes
1answer
41 views
How to search for an object by class in the LDAP base?
I'm trying to search an LDAP for an object of a specific class, but it always returns
result: 32 No such object
Background:
I'm trying to access a PGP Universal server at keyserver.pgp.com which is a ...
1
vote
1answer
42 views
PGP key export is very long - how to shorten?
I recently needed to publish my PGP key. However the export is veeery long:
$ gpg2 --list-secret-keys --keyid-format LONG
/home/user/.gnupg/pubring.kbx
-----------------------------
sec rsa4096/...
0
votes
1answer
29 views
Same gpg command applied on the same string but got different result
I'm new to GPG and I've learned some basic GPG commands recently. I just found that using the same GPG command to encrypt the same data always generates different result. Below is an example. Is is ...
1
vote
1answer
56 views
Prevent .deb from installing PGP keys
Some .deb packages, as Google SW, for example, install PGP keys and add their own software repository during installation.
Question: How can I prevent .deb packages from installing PGP keys and ...
0
votes
0answers
34 views
GPG: How to import a subkey from one master key to another?
Suppose I have two IDs, each with a master key and a number of subkeys. I wish to import subkeys from master key 2 as a subkey of master key1.
This is useful in cases where you generate a subkey on ...
0
votes
0answers
46 views
Mutt bypass pgp Passphrase
I am running into an issue on my ubuntu linux box. What I am trying to do is be able to run a cronjob using mutt to send files to HR team. I have followed the following steps on this website Mutt: how ...
1
vote
1answer
1k views
How to decrypt file that was symmetrically encrypted using GPG?
I've created and symmetrically encrypted a file using GPG:
touch test.txt && echo 'test' >> test.txt
gpg --output test.txt --symmetric test.txt
But now I cannot figure out how to ...
0
votes
0answers
850 views
Error when trying to install packages via pacman on Arch Linux WSL
I am using Arch for Windows Subsystem for Linux build. Whenever I try to install a specific package (e.g. python) it displays a Y/n prompt:
:: Import PGP key [KEY], "[Name]", created: [date]? [Y/n]
...
3
votes
1answer
2k views
“gpg-agent is older than us” warning message even after running gpgconf --kill all [closed]
I have installed gpg version 2.2.17 from source.
When I run gpg --card-status gpg reports:
gpg: WARNING: server 'gpg-agent' is older than us (2.2.4 < 2.2.17).
gpg: Note: Outdated servers may ...
1
vote
1answer
548 views
Piping Backups through Compression and Encryption
I am trying to backup a disk image of a local system to a remote system, in a way I can automate by bash script at a later point. Backing up and restoring was going well until I introduced encryption, ...
1
vote
0answers
241 views
gpg bad signature clear text
How do you verify a clearsign signature if all you got is the person public key and their clearsign signature, say from an email without a source file.
For ex:
-----BEGIN PGP SIGNED MESSAGE-----
...
4
votes
2answers
2k views
gpg cannot unlock passphrase-less key: “gpg: public key decryption failed: No passphrase given”
I have a gpg setup started with older gpg versions and I did not use a passphrase back then. I would type enter directly when prompted for it. I'm not sure if that means the key isn't encrypted or if ...
1
vote
1answer
190 views
PureOS verification of download
PureOS has SHA256 verification of download, but I've heard that SHA isn't so secure. Do they sign their files or provide associated .sig files? And is it true that that would be more secure?
1
vote
0answers
297 views
Mutt asks “Enter keyID”, does not accept any IDs
I am trying to use Mutt with GPG to encrypt emails. Whenever I try to encrypt, I am asked to "Enter keyID for user@domain". No matter what I enter, it asks me to enter the value.
I definitely have ...
5
votes
1answer
402 views
PGP Keyservers Featuring Download over HTTPS?
My company's firewall blocks keyservers on port 80, and a few of the distributions that I'm hoping to support don't feature HKPS yet for fetching over TLS.
Are there keyservers out there that offer a ...
0
votes
2answers
224 views
Is it possible to reuse a GnuPG key in another installation?
I have a GPG key which I use to sign and submit packages to Launchpad.
Is it possible to reuse that key in another installation, or do I always have to create a new key for the new installation of a ...
82
votes
4answers
113k views
How to export a GPG private key and public key to a file
I have generated keys using GPG, by executing the following command
gpg --gen-key
Now I need to export the key pair to a file;
i.e., private and public keys to private.pgp and public.pgp, ...
0
votes
1answer
424 views
Does gpg-agent have a GUI?
Is there a GUI of application gpg-agent ?
How I can start it ? I need to change some settings there, but can't find it.
1
vote
1answer
102 views
GPG seems to alter imported keys
So I've never used gpg (2.0.14) before this week and I'm no cryptography pro, but the results I've been getting with gpg seem odd.
When I import keys (e.g. gpg --import public.key) that were ...
0
votes
0answers
146 views
Extend PGP license of secret key in other server
I'm facing an issue with extending the validity of the PGP license.
I've generated a key in server1 and exported publicKey to server2 for encryption , and secretkey to server3 for decryption one year ...
1
vote
0answers
167 views
Debian 9.2: Setting Up SFTP Service with Public Key Autentication and PGP
My final goal is to create a SFTP server coupled with a PGP authentication as described here: SFTP+PGP.
Actually I succeeded to create a sftp_user user who can connect to his own directory on my ...
1
vote
1answer
3k views
Unknown public key when installing dependency for package in Manjaro Linux?
I'm running Manjaro Linux and trying to install Discord app. Since Discord doesn't have an official build for Arch-based systems, I've tried to use yaourt and the install gives me this error:
==> ...
-1
votes
1answer
131 views
How to open a PDF file from Unix Putty Box( PGP) [closed]
I have a situation where i am unable to open the PDF files from the Unix Putty box.The vendor is placing these files in Server(We called it as Q drive) and we were ftp these from files from Q drive to ...
2
votes
1answer
137 views
GPG installation compatible with PGP 2.x
Is it possible to prepare GPG installation with external libraries which is fully compatible with earlier PGP versions (and keyrings)? I read that GPG needs external libraries because of patented ...
3
votes
0answers
3k views
Converting Old PGP Keys to GPG - [RESOLVED] [closed]
We were migrating from Solaris to Linux where we used PGP v6.5.2 in Solaris. We need to use GPG in Linux now. I installed GPG 2.0.14 having libgcrypt v1.4.5. While trying to decrypt files generated ...
1
vote
0answers
89 views
Ability to use GNUPG's Webkey as a Web Services authentication mechanism
Is there a way to use GNUPG's new Webkey capability to create a federated passwordless public key authentication mechanism for web services login?
Something like the following architecture:
.----...
0
votes
1answer
307 views
Generating a pgp key from an initial private/material key
Some library allows me to generate a pgp key pair in a such a way:
var options = {
curve: 'secp256k1',
userId: 'Hamlet <hamlet@example.net>',
passphrase: 'To be, or not to be: that ...
0
votes
1answer
2k views
Why does pacman need to import PGP key during Rofi installation?
I installed the Rofi window switcher with pacman this morning on a clean install of Arch linux. During the install it paused and prompted me to import a PGP key as it was searching for keys. Is this ...
24
votes
1answer
9k views
GPG Hangs When Private Keys are Accessed
I like to sign my git commits with my PGP key, so I was quite alarmed when I went to git commit -S but instead of prompting for my PGP key passphrase, git just started hanging. I haven't made a change ...
1
vote
0answers
881 views
GPG not decrypting symmetrically encrypted file
I have data which I encrypted using gpg -ac --cipher-algo AES256 data and a passphrase. I moved that file onto a different machine with gpg as well, but unlike the system it was encrypted on (TrueOS), ...
6
votes
2answers
2k views
Using pass on multiple computers. Which pgp key to share?
I'm using pass password manager on multiple computers, linked via a git repository. Which pgp key do I need to share across computers, the public, private, or both, so that I can add /edit /delete ...
0
votes
0answers
318 views
Using Private PGP key as login credential?
This is NOT for the likes of remote SSH, but is somewhat similar for local physical use with a USB key device. Could I somehow setup a customized personalized login system that uses my own Private PGP ...
1
vote
1answer
2k views
/bin/sh: error importing function definition for `module'
I have script right now but it always prompt this is error.
stderr=/bin/sh: module: line 1: syntax error: unexpected end of file
/bin/sh: error importing function definition formodule' `
#!/bin/sh
#...
2
votes
1answer
581 views
Is it safe to accept a new PGP key in pacman on Arch Linux?
When previously trying to install arch-audit on Arch Linux from the repository using sudo pacman -S arch-audit I was told:
resolving dependencies...
looking for conflicting packages...
Packages (1) ...
1
vote
1answer
103 views
secure apt R pgp key no_pubkeys found
I already applied the solutions on these pages
Why failing to get CRAN key for R backports?
and
https://cran.r-project.org/bin/linux/debian/#secure-apt
for installing R on Debian Linux Jessie
...
1
vote
1answer
235 views
Is there any program to get the GPG password from the GUI
I am working about a GUI PGP application with Zenity. GPG asks passphrase on terminal screen. But I want to enter passphrase from a GUI dialog box not in terminal (like zenity --password) I tried ...
5
votes
1answer
782 views
GPG key generator does *not* use entropy
I'm trying to generate a GPG key on Ubuntu 16.10 and GPG is taking forever.
I googled a bit and found some websites, including some questions on StackExchange, suggesting to run an entropy generator ...
0
votes
1answer
1k views
Try to install lib32-ncurses-compat-libs 6.04 on Antegros
When I try to install lib32-ncurses5-compat-libs under Antegros (Arch derivate) I get an error message while checking the PGP signatures.
(The error message is in german, but it states, that the PGP ...
5
votes
1answer
373 views
Can mutt automatically sign emails that it encrypts?
I love the mutt option crypt_opportunistic_encrypt. This allows me to automatically encrypt emails to recipients for whom I have the key. (And not if I cc to a group that contains members without keys....
16
votes
2answers
28k views
How to import keys from a keyserver using gpg in debian?
AFAIK The basic concept about gpg/pgp is that for two people who want to create trust between them is both publish a public key and private key (the private key is kept with the user who creates it, ...
8
votes
1answer
428 views
How to make PGP's output less verbose in mutt with GnuPG & TOFU?
I recently added trust-model tofu+pgp in my .gnupg/gpg.conf to use TOFU and automatically trust (marginally) keys from e-mails I see for the first time. It has the bad consequence of making PGP's ...
12
votes
3answers
17k views
packer - ERROR: One or more PGP signatures could not be verified!
I'm trying to install ncurses5-compat-libs on Arch Linux with packer.
But I get this error:
==> ERROR: One or more PGP signatures could not be verified!
How can I fix it?
1
vote
1answer
2k views
Problem configuring GPG pinentry
I have two hosts, A and B. On A I have the gpg pinentry program setup to be pinentry-curses but I have no idea how I did it anymore. I can not seem to find the difference between A and B, but on A (...
-2
votes
1answer
19 views
PGP key for Rails deployment tutorial
In this portion of the tutorial I'm using, I'm supposed to setup a PGP key.
Should I use the one they list, or is that just a placeholder? If so, how do I choose what key I want to use?
0
votes
2answers
129 views
Why is no second PGP possible?
I've a problem with the command "gpg --gen-key".
At my very first time, I connected an eMail-Account to this and everything worked fine. I can use it and so on.
No Problem.
The problem is: I want to ...
6
votes
1answer
2k views
How can I encrypt with my previous GPG subkey after creating a new one?
I recently generated two new subkeys to put on an external key card. I previously had a master key (usage marked SC) and a single subkey (marked E). This arrangement was worked fine for what I needed ...
