2022 Developer Survey is open! Take survey.

Questions tagged [pgp]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
51 views

Export GPG Private Key WITHOUT knowning the passphrase

so I spent many hours on this now and I hope someone can give me any useful input. I want to export an encrypted secret key from GPG (which lies in ~/.gnupg/private-keys-v1.d) but I do not have the ...
user avatar
0 votes
0 answers
39 views

How to simplify back up contents of password manager and gnupg

If secure backups are not simple then most people will not use them. I installed gpg and pass on Ubuntu 20.04 and started encrypting all my passwords. Now -- how to backup the backup. After reading ...
user avatar
0 votes
0 answers
22 views

Exporting my gpg files (and pgp public/private keys) to Pass on new computer

I like using the program Pass, but am struggling a bit here on how to set it up from old files. So I have the .password-store/ folder, and I have my private and public keys as pgp files. I am ...
user avatar
  • 3
0 votes
0 answers
48 views

Remove all PGP functionality in mutt

I want mutt to ignore everything PGP-related. If I receive a signed message, I want to ignore the signature. If I receive an encrypted message, I'm OK with seeing the raw encrypted string. I have the ...
user avatar
  • 283
23 votes
5 answers
7k views

sks-keyservers gone. What to use instead?

https://sks-keyservers.net/ says This service is deprecated. This means it is no longer maintained, and new HKPS certificates will not be issued. Service reliability should not be expected. Update ...
user avatar
  • 29.7k
0 votes
1 answer
110 views

Do I need Sign capability on my PGP master key

When generating a PGP master key, its capabilities default to Certificate and Sign (SC). However, if I am going to create a signing sub key later and strip the master key to offline storage. Is it ...
user avatar
  • 261
2 votes
1 answer
285 views

key signing: can't see new signatures

I'm getting a few friends to sign my key. Each time they've signed my key, if they send the signed key to a key server, when I try to get the signatures with gpg --refresh-keys --keyserver some....
user avatar
2 votes
1 answer
332 views

Unknown validity despite having signed the key myself

The key currently has an unknown validity: $ gpg --edit-key some.user pub rsa4096/FAC6C35BDFF9359A created: 2020-03-01 expires: 2022-03-01 usage: SC trust: full validity: ...
user avatar
  • 2,738
1 vote
1 answer
723 views

Author's GPG subkey has expired, what can I do?

I am trying to download an update for a piece of software, and my package manager says that the key is invalid and thus warns me. W: Failed to fetch https://deb.torproject.org/torproject.org/dists/...
user avatar
0 votes
1 answer
100 views

How to allow anonymous access to create objects in LDAP subtree?

I'm having a hard time trying to populate an LDAP with PGP keys. I have set up my LDAP (OpenLDAP if that matters) for a PGP key server structure as explained here which worked well so far. Now I want ...
user avatar
  • 142
0 votes
1 answer
70 views

How to search for an object by class in the LDAP base?

I'm trying to search an LDAP for an object of a specific class, but it always returns result: 32 No such object Background: I'm trying to access a PGP Universal server at keyserver.pgp.com which is a ...
user avatar
  • 142
2 votes
1 answer
161 views

PGP key export is very long - how to shorten?

I recently needed to publish my PGP key. However the export is veeery long: $ gpg2 --list-secret-keys --keyid-format LONG /home/user/.gnupg/pubring.kbx ----------------------------- sec rsa4096/...
user avatar
0 votes
1 answer
77 views

Same gpg command applied on the same string but got different result

I'm new to GPG and I've learned some basic GPG commands recently. I just found that using the same GPG command to encrypt the same data always generates different result. Below is an example. Is is ...
user avatar
1 vote
1 answer
89 views

Prevent .deb from installing PGP keys

Some .deb packages, as Google SW, for example, install PGP keys and add their own software repository during installation. Question: How can I prevent .deb packages from installing PGP keys and ...
user avatar
  • 546
1 vote
2 answers
4k views

How to decrypt file that was symmetrically encrypted using GPG?

I've created and symmetrically encrypted a file using GPG: touch test.txt && echo 'test' >> test.txt gpg --output test.txt --symmetric test.txt But now I cannot figure out how to ...
user avatar
  • 904
0 votes
0 answers
1k views

Error when trying to install packages via pacman on Arch Linux WSL

I am using Arch for Windows Subsystem for Linux build. Whenever I try to install a specific package (e.g. python) it displays a Y/n prompt: :: Import PGP key [KEY], "[Name]", created: [date]? [Y/n] ...
user avatar
10 votes
1 answer
6k views

"gpg-agent is older than us" warning message even after running gpgconf --kill all [closed]

I have installed gpg version 2.2.17 from source. When I run gpg --card-status gpg reports: gpg: WARNING: server 'gpg-agent' is older than us (2.2.4 < 2.2.17). gpg: Note: Outdated servers may ...
user avatar
2 votes
1 answer
987 views

Piping Backups through Compression and Encryption

I am trying to backup a disk image of a local system to a remote system, in a way I can automate by bash script at a later point. Backing up and restoring was going well until I introduced encryption, ...
user avatar
1 vote
0 answers
368 views

gpg bad signature clear text

How do you verify a clearsign signature if all you got is the person public key and their clearsign signature, say from an email without a source file. For ex: -----BEGIN PGP SIGNED MESSAGE----- ...
user avatar
  • 11
5 votes
2 answers
4k views

gpg cannot unlock passphrase-less key: "gpg: public key decryption failed: No passphrase given"

I have a gpg setup started with older gpg versions and I did not use a passphrase back then. I would type enter directly when prompted for it. I'm not sure if that means the key isn't encrypted or if ...
user avatar
  • 141
1 vote
1 answer
303 views

PureOS verification of download

PureOS has SHA256 verification of download, but I've heard that SHA isn't so secure. Do they sign their files or provide associated .sig files? And is it true that that would be more secure?
user avatar
  • 11
1 vote
0 answers
380 views

Mutt asks "Enter keyID", does not accept any IDs

I am trying to use Mutt with GPG to encrypt emails. Whenever I try to encrypt, I am asked to "Enter keyID for user@domain". No matter what I enter, it asks me to enter the value. I definitely have ...
user avatar
5 votes
1 answer
748 views

PGP Keyservers Featuring Download over HTTPS?

My company's firewall blocks keyservers on port 80, and a few of the distributions that I'm hoping to support don't feature HKPS yet for fetching over TLS. Are there keyservers out there that offer a ...
user avatar
  • 35.5k
0 votes
2 answers
473 views

Is it possible to reuse a GnuPG key in another installation?

I have a GPG key which I use to sign and submit packages to Launchpad. Is it possible to reuse that key in another installation, or do I always have to create a new key for the new installation of a ...
user avatar
167 votes
4 answers
208k views

How to export a GPG private key and public key to a file

I have generated keys using GPG, by executing the following command gpg --gen-key Now I need to export the key pair to a file; i.e., private and public keys to private.pgp and public.pgp, ...
user avatar
  • 1,773
0 votes
1 answer
685 views

Does gpg-agent have a GUI?

Is there a GUI of application gpg-agent ? How I can start it ? I need to change some settings there, but can't find it.
user avatar
2 votes
1 answer
139 views

GPG seems to alter imported keys

So I've never used gpg (2.0.14) before this week and I'm no cryptography pro, but the results I've been getting with gpg seem odd. When I import keys (e.g. gpg --import public.key) that were ...
user avatar
  • 21
0 votes
0 answers
177 views

Extend PGP license of secret key in other server

I'm facing an issue with extending the validity of the PGP license. I've generated a key in server1 and exported publicKey to server2 for encryption , and secretkey to server3 for decryption one year ...
user avatar
  • 1
1 vote
0 answers
234 views

Debian 9.2: Setting Up SFTP Service with Public Key Autentication and PGP

My final goal is to create a SFTP server coupled with a PGP authentication as described here: SFTP+PGP. Actually I succeeded to create a sftp_user user who can connect to his own directory on my ...
user avatar
  • 119
1 vote
1 answer
4k views

Unknown public key when installing dependency for package in Manjaro Linux?

I'm running Manjaro Linux and trying to install Discord app. Since Discord doesn't have an official build for Arch-based systems, I've tried to use yaourt and the install gives me this error: ==> ...
user avatar
-1 votes
1 answer
165 views

How to open a PDF file from Unix Putty Box( PGP) [closed]

I have a situation where i am unable to open the PDF files from the Unix Putty box.The vendor is placing these files in Server(We called it as Q drive) and we were ftp these from files from Q drive to ...
user avatar
2 votes
1 answer
153 views

GPG installation compatible with PGP 2.x

Is it possible to prepare GPG installation with external libraries which is fully compatible with earlier PGP versions (and keyrings)? I read that GPG needs external libraries because of patented ...
user avatar
  • 71
3 votes
0 answers
4k views

Converting Old PGP Keys to GPG - [RESOLVED] [closed]

We were migrating from Solaris to Linux where we used PGP v6.5.2 in Solaris. We need to use GPG in Linux now. I installed GPG 2.0.14 having libgcrypt v1.4.5. While trying to decrypt files generated ...
user avatar
  • 31
1 vote
0 answers
94 views

Ability to use GNUPG's Webkey as a Web Services authentication mechanism

Is there a way to use GNUPG's new Webkey capability to create a federated passwordless public key authentication mechanism for web services login? Something like the following architecture: .----...
user avatar
  • 5,542
0 votes
1 answer
458 views

Generating a pgp key from an initial private/material key

Some library allows me to generate a pgp key pair in a such a way: var options = { curve: 'secp256k1', userId: 'Hamlet <hamlet@example.net>', passphrase: 'To be, or not to be: that ...
user avatar
  • 1
0 votes
1 answer
2k views

Why does pacman need to import PGP key during Rofi installation?

I installed the Rofi window switcher with pacman this morning on a clean install of Arch linux. During the install it paused and prompted me to import a PGP key as it was searching for keys. Is this ...
user avatar
29 votes
2 answers
13k views

GPG Hangs When Private Keys are Accessed

I like to sign my git commits with my PGP key, so I was quite alarmed when I went to git commit -S but instead of prompting for my PGP key passphrase, git just started hanging. I haven't made a change ...
user avatar
1 vote
0 answers
1k views

GPG not decrypting symmetrically encrypted file

I have data which I encrypted using gpg -ac --cipher-algo AES256 data and a passphrase. I moved that file onto a different machine with gpg as well, but unlike the system it was encrypted on (TrueOS), ...
user avatar
6 votes
2 answers
2k views

Using pass on multiple computers. Which pgp key to share?

I'm using pass password manager on multiple computers, linked via a git repository. Which pgp key do I need to share across computers, the public, private, or both, so that I can add /edit /delete ...
user avatar
0 votes
0 answers
457 views

Using Private PGP key as login credential?

This is NOT for the likes of remote SSH, but is somewhat similar for local physical use with a USB key device. Could I somehow setup a customized personalized login system that uses my own Private PGP ...
user avatar
1 vote
1 answer
3k views

/bin/sh: error importing function definition for `module'

I have script right now but it always prompt this is error. stderr=/bin/sh: module: line 1: syntax error: unexpected end of file /bin/sh: error importing function definition formodule' ` #!/bin/sh #...
user avatar
  • 13
2 votes
1 answer
753 views

Is it safe to accept a new PGP key in pacman on Arch Linux?

When previously trying to install arch-audit on Arch Linux from the repository using sudo pacman -S arch-audit I was told: resolving dependencies... looking for conflicting packages... Packages (1) ...
user avatar
1 vote
1 answer
107 views

secure apt R pgp key no_pubkeys found

I already applied the solutions on these pages Why failing to get CRAN key for R backports? and https://cran.r-project.org/bin/linux/debian/#secure-apt for installing R on Debian Linux Jessie ...
user avatar
1 vote
1 answer
309 views

Is there any program to get the GPG password from the GUI

I am working about a GUI PGP application with Zenity. GPG asks passphrase on terminal screen. But I want to enter passphrase from a GUI dialog box not in terminal (like zenity --password) I tried ...
user avatar
5 votes
1 answer
865 views

GPG key generator does *not* use entropy

I'm trying to generate a GPG key on Ubuntu 16.10 and GPG is taking forever. I googled a bit and found some websites, including some questions on StackExchange, suggesting to run an entropy generator ...
user avatar
  • 153
0 votes
1 answer
1k views

Try to install lib32-ncurses-compat-libs 6.04 on Antegros

When I try to install lib32-ncurses5-compat-libs under Antegros (Arch derivate) I get an error message while checking the PGP signatures. (The error message is in german, but it states, that the PGP ...
user avatar
5 votes
1 answer
464 views

Can mutt automatically sign emails that it encrypts?

I love the mutt option crypt_opportunistic_encrypt. This allows me to automatically encrypt emails to recipients for whom I have the key. (And not if I cc to a group that contains members without keys....
user avatar
  • 18.1k
19 votes
2 answers
42k views

How to import keys from a keyserver using gpg in debian?

AFAIK The basic concept about gpg/pgp is that for two people who want to create trust between them is both publish a public key and private key (the private key is kept with the user who creates it, ...
user avatar
  • 10.8k
8 votes
1 answer
487 views

How to make PGP's output less verbose in mutt with GnuPG & TOFU?

I recently added trust-model tofu+pgp in my .gnupg/gpg.conf to use TOFU and automatically trust (marginally) keys from e-mails I see for the first time. It has the bad consequence of making PGP's ...
user avatar
  • 283
13 votes
3 answers
19k views

packer - ERROR: One or more PGP signatures could not be verified!

I'm trying to install ncurses5-compat-libs on Arch Linux with packer. But I get this error: ==> ERROR: One or more PGP signatures could not be verified! How can I fix it?
user avatar