Questions tagged [pgp]
The pgp tag has no usage guidance.
66
questions
0
votes
0
answers
51
views
Export GPG Private Key WITHOUT knowning the passphrase
so I spent many hours on this now and I hope someone can give me any useful input.
I want to export an encrypted secret key from GPG (which lies in ~/.gnupg/private-keys-v1.d) but I do not have the ...
0
votes
0
answers
39
views
How to simplify back up contents of password manager and gnupg
If secure backups are not simple then most people will not use them. I installed gpg and pass on Ubuntu 20.04 and started encrypting all my passwords.
Now -- how to backup the backup. After reading ...
- 101
0
votes
0
answers
22
views
Exporting my gpg files (and pgp public/private keys) to Pass on new computer
I like using the program Pass, but am struggling a bit here on how to set it up from old files. So I have the .password-store/ folder, and I have my private and public keys as pgp files. I am ...
- 3
0
votes
0
answers
48
views
Remove all PGP functionality in mutt
I want mutt to ignore everything PGP-related. If I receive a signed message, I want to ignore the signature. If I receive an encrypted message, I'm OK with seeing the raw encrypted string. I have the ...
- 283
23
votes
5
answers
7k
views
sks-keyservers gone. What to use instead?
https://sks-keyservers.net/ says
This service is deprecated. This means it is no longer maintained, and new HKPS certificates will not be issued. Service reliability should not be expected.
Update ...
- 29.7k
0
votes
1
answer
110
views
Do I need Sign capability on my PGP master key
When generating a PGP master key, its capabilities default to Certificate and Sign (SC).
However, if I am going to create a signing sub key later and strip the master key to offline storage. Is it ...
- 261
2
votes
1
answer
285
views
key signing: can't see new signatures
I'm getting a few friends to sign my key. Each time they've signed my key, if they send the signed key to a key server, when I try to get the signatures with gpg --refresh-keys --keyserver some....
user465929
2
votes
1
answer
332
views
Unknown validity despite having signed the key myself
The key currently has an unknown validity:
$ gpg --edit-key some.user
pub rsa4096/FAC6C35BDFF9359A
created: 2020-03-01 expires: 2022-03-01 usage: SC
trust: full validity: ...
- 2,738
1
vote
1
answer
723
views
Author's GPG subkey has expired, what can I do?
I am trying to download an update for a piece of software, and my package manager says that the key is invalid and thus warns me.
W: Failed to fetch https://deb.torproject.org/torproject.org/dists/...
0
votes
1
answer
100
views
How to allow anonymous access to create objects in LDAP subtree?
I'm having a hard time trying to populate an LDAP with PGP keys. I have set up my LDAP (OpenLDAP if that matters) for a PGP key server structure as explained here which worked well so far.
Now I want ...
- 142
0
votes
1
answer
70
views
How to search for an object by class in the LDAP base?
I'm trying to search an LDAP for an object of a specific class, but it always returns
result: 32 No such object
Background:
I'm trying to access a PGP Universal server at keyserver.pgp.com which is a ...
- 142
2
votes
1
answer
161
views
PGP key export is very long - how to shorten?
I recently needed to publish my PGP key. However the export is veeery long:
$ gpg2 --list-secret-keys --keyid-format LONG
/home/user/.gnupg/pubring.kbx
-----------------------------
sec rsa4096/...
- 21
0
votes
1
answer
77
views
Same gpg command applied on the same string but got different result
I'm new to GPG and I've learned some basic GPG commands recently. I just found that using the same GPG command to encrypt the same data always generates different result. Below is an example. Is is ...
- 1,626
1
vote
1
answer
89
views
Prevent .deb from installing PGP keys
Some .deb packages, as Google SW, for example, install PGP keys and add their own software repository during installation.
Question: How can I prevent .deb packages from installing PGP keys and ...
- 546
1
vote
2
answers
4k
views
How to decrypt file that was symmetrically encrypted using GPG?
I've created and symmetrically encrypted a file using GPG:
touch test.txt && echo 'test' >> test.txt
gpg --output test.txt --symmetric test.txt
But now I cannot figure out how to ...
- 904
0
votes
0
answers
1k
views
Error when trying to install packages via pacman on Arch Linux WSL
I am using Arch for Windows Subsystem for Linux build. Whenever I try to install a specific package (e.g. python) it displays a Y/n prompt:
:: Import PGP key [KEY], "[Name]", created: [date]? [Y/n]
...
10
votes
1
answer
6k
views
"gpg-agent is older than us" warning message even after running gpgconf --kill all [closed]
I have installed gpg version 2.2.17 from source.
When I run gpg --card-status gpg reports:
gpg: WARNING: server 'gpg-agent' is older than us (2.2.4 < 2.2.17).
gpg: Note: Outdated servers may ...
- 361
2
votes
1
answer
987
views
Piping Backups through Compression and Encryption
I am trying to backup a disk image of a local system to a remote system, in a way I can automate by bash script at a later point. Backing up and restoring was going well until I introduced encryption, ...
- 21
1
vote
0
answers
368
views
gpg bad signature clear text
How do you verify a clearsign signature if all you got is the person public key and their clearsign signature, say from an email without a source file.
For ex:
-----BEGIN PGP SIGNED MESSAGE-----
...
- 11
5
votes
2
answers
4k
views
gpg cannot unlock passphrase-less key: "gpg: public key decryption failed: No passphrase given"
I have a gpg setup started with older gpg versions and I did not use a passphrase back then. I would type enter directly when prompted for it. I'm not sure if that means the key isn't encrypted or if ...
- 141
1
vote
1
answer
303
views
PureOS verification of download
PureOS has SHA256 verification of download, but I've heard that SHA isn't so secure. Do they sign their files or provide associated .sig files? And is it true that that would be more secure?
- 11
1
vote
0
answers
380
views
Mutt asks "Enter keyID", does not accept any IDs
I am trying to use Mutt with GPG to encrypt emails. Whenever I try to encrypt, I am asked to "Enter keyID for user@domain". No matter what I enter, it asks me to enter the value.
I definitely have ...
- 101
5
votes
1
answer
748
views
PGP Keyservers Featuring Download over HTTPS?
My company's firewall blocks keyservers on port 80, and a few of the distributions that I'm hoping to support don't feature HKPS yet for fetching over TLS.
Are there keyservers out there that offer a ...
- 35.5k
0
votes
2
answers
473
views
Is it possible to reuse a GnuPG key in another installation?
I have a GPG key which I use to sign and submit packages to Launchpad.
Is it possible to reuse that key in another installation, or do I always have to create a new key for the new installation of a ...
167
votes
4
answers
208k
views
How to export a GPG private key and public key to a file
I have generated keys using GPG, by executing the following command
gpg --gen-key
Now I need to export the key pair to a file;
i.e., private and public keys to private.pgp and public.pgp, ...
- 1,773
0
votes
1
answer
685
views
Does gpg-agent have a GUI?
Is there a GUI of application gpg-agent ?
How I can start it ? I need to change some settings there, but can't find it.
- 11
2
votes
1
answer
139
views
GPG seems to alter imported keys
So I've never used gpg (2.0.14) before this week and I'm no cryptography pro, but the results I've been getting with gpg seem odd.
When I import keys (e.g. gpg --import public.key) that were ...
- 21
0
votes
0
answers
177
views
Extend PGP license of secret key in other server
I'm facing an issue with extending the validity of the PGP license.
I've generated a key in server1 and exported publicKey to server2 for encryption , and secretkey to server3 for decryption one year ...
- 1
1
vote
0
answers
234
views
Debian 9.2: Setting Up SFTP Service with Public Key Autentication and PGP
My final goal is to create a SFTP server coupled with a PGP authentication as described here: SFTP+PGP.
Actually I succeeded to create a sftp_user user who can connect to his own directory on my ...
- 119
1
vote
1
answer
4k
views
Unknown public key when installing dependency for package in Manjaro Linux?
I'm running Manjaro Linux and trying to install Discord app. Since Discord doesn't have an official build for Arch-based systems, I've tried to use yaourt and the install gives me this error:
==> ...
- 501
-1
votes
1
answer
165
views
How to open a PDF file from Unix Putty Box( PGP) [closed]
I have a situation where i am unable to open the PDF files from the Unix Putty box.The vendor is placing these files in Server(We called it as Q drive) and we were ftp these from files from Q drive to ...
- 23
2
votes
1
answer
153
views
GPG installation compatible with PGP 2.x
Is it possible to prepare GPG installation with external libraries which is fully compatible with earlier PGP versions (and keyrings)? I read that GPG needs external libraries because of patented ...
- 71
3
votes
0
answers
4k
views
Converting Old PGP Keys to GPG - [RESOLVED] [closed]
We were migrating from Solaris to Linux where we used PGP v6.5.2 in Solaris. We need to use GPG in Linux now. I installed GPG 2.0.14 having libgcrypt v1.4.5. While trying to decrypt files generated ...
- 31
1
vote
0
answers
94
views
Ability to use GNUPG's Webkey as a Web Services authentication mechanism
Is there a way to use GNUPG's new Webkey capability to create a federated passwordless public key authentication mechanism for web services login?
Something like the following architecture:
.----...
- 5,542
0
votes
1
answer
458
views
Generating a pgp key from an initial private/material key
Some library allows me to generate a pgp key pair in a such a way:
var options = {
curve: 'secp256k1',
userId: 'Hamlet <hamlet@example.net>',
passphrase: 'To be, or not to be: that ...
- 1
0
votes
1
answer
2k
views
Why does pacman need to import PGP key during Rofi installation?
I installed the Rofi window switcher with pacman this morning on a clean install of Arch linux. During the install it paused and prompted me to import a PGP key as it was searching for keys. Is this ...
user223600
29
votes
2
answers
13k
views
GPG Hangs When Private Keys are Accessed
I like to sign my git commits with my PGP key, so I was quite alarmed when I went to git commit -S but instead of prompting for my PGP key passphrase, git just started hanging. I haven't made a change ...
- 1,052
1
vote
0
answers
1k
views
GPG not decrypting symmetrically encrypted file
I have data which I encrypted using gpg -ac --cipher-algo AES256 data and a passphrase. I moved that file onto a different machine with gpg as well, but unlike the system it was encrypted on (TrueOS), ...
6
votes
2
answers
2k
views
Using pass on multiple computers. Which pgp key to share?
I'm using pass password manager on multiple computers, linked via a git repository. Which pgp key do I need to share across computers, the public, private, or both, so that I can add /edit /delete ...
- 161
0
votes
0
answers
457
views
Using Private PGP key as login credential?
This is NOT for the likes of remote SSH, but is somewhat similar for local physical use with a USB key device. Could I somehow setup a customized personalized login system that uses my own Private PGP ...
user91679
1
vote
1
answer
3k
views
/bin/sh: error importing function definition for `module'
I have script right now but it always prompt this is error.
stderr=/bin/sh: module: line 1: syntax error: unexpected end of file
/bin/sh: error importing function definition formodule' `
#!/bin/sh
#...
- 13
2
votes
1
answer
753
views
Is it safe to accept a new PGP key in pacman on Arch Linux?
When previously trying to install arch-audit on Arch Linux from the repository using sudo pacman -S arch-audit I was told:
resolving dependencies...
looking for conflicting packages...
Packages (1) ...
user103789
1
vote
1
answer
107
views
secure apt R pgp key no_pubkeys found
I already applied the solutions on these pages
Why failing to get CRAN key for R backports?
and
https://cran.r-project.org/bin/linux/debian/#secure-apt
for installing R on Debian Linux Jessie
...
1
vote
1
answer
309
views
Is there any program to get the GPG password from the GUI
I am working about a GUI PGP application with Zenity. GPG asks passphrase on terminal screen. But I want to enter passphrase from a GUI dialog box not in terminal (like zenity --password) I tried ...
5
votes
1
answer
865
views
GPG key generator does *not* use entropy
I'm trying to generate a GPG key on Ubuntu 16.10 and GPG is taking forever.
I googled a bit and found some websites, including some questions on StackExchange, suggesting to run an entropy generator ...
- 153
0
votes
1
answer
1k
views
Try to install lib32-ncurses-compat-libs 6.04 on Antegros
When I try to install lib32-ncurses5-compat-libs under Antegros (Arch derivate) I get an error message while checking the PGP signatures.
(The error message is in german, but it states, that the PGP ...
5
votes
1
answer
464
views
Can mutt automatically sign emails that it encrypts?
I love the mutt option crypt_opportunistic_encrypt. This allows me to automatically encrypt emails to recipients for whom I have the key. (And not if I cc to a group that contains members without keys....
- 18.1k
19
votes
2
answers
42k
views
How to import keys from a keyserver using gpg in debian?
AFAIK The basic concept about gpg/pgp is that for two people who want to create trust between them is both publish a public key and private key (the private key is kept with the user who creates it, ...
- 10.8k
8
votes
1
answer
487
views
How to make PGP's output less verbose in mutt with GnuPG & TOFU?
I recently added trust-model tofu+pgp in my .gnupg/gpg.conf to use TOFU and automatically trust (marginally) keys from e-mails I see for the first time. It has the bad consequence of making PGP's ...
- 283
13
votes
3
answers
19k
views
packer - ERROR: One or more PGP signatures could not be verified!
I'm trying to install ncurses5-compat-libs on Arch Linux with packer.
But I get this error:
==> ERROR: One or more PGP signatures could not be verified!
How can I fix it?
- 543