Questions tagged [pinentry]
The pinentry tag has no usage guidance.
29
questions
0
votes
0
answers
21
views
How to call pinentry from bash script
How to call pinentry from bash script so I am prompted for single input on the same terminal from which my script was invoked from and then pipe the entry to some other command via stdout for the sake ...
- 101
0
votes
0
answers
16
views
Password not remembered in 'pinentry-mode loopback' (GPG)
I have an encrypted secret file - secret.gpg. For better security I created a separate user user2 in whose home folder this file is stored. The idea is that from under user1 (via sudo) to access only ...
- 1
1
vote
0
answers
107
views
GPG using sudo under another user, is `pinentry-mode loopback` safe?
There are 2 users: user1 and user2. When trying to use gpg via sudo (symmetric decryption):
user1@host: sudo -u user2 gpg /home/user2/pass.gpg
an error
gpg: decryption failed: No secret key.
I set it ...
- 127
2
votes
1
answer
2k
views
GPG can't decrypt: no pinentry program
I can't decrypt my passwords with pass neither with
gpg directly.
gpg: encrypted with rsa4096 key, ID id, created creation_date
"name <email>"
gpg: public key decryption ...
- 367
0
votes
0
answers
13
views
GPG - use cached key before prompting for other cards when multiple receivers?
When using gpg 2.2.28 & gpg-agent to decrypt a ciphertext that has been encrypted for (any one of) multiple 'receivers', the default behaviour is that it tries to find and use private keys in some ...
- 1,588
2
votes
1
answer
583
views
Strange error with GnuPG: claims "no secret key" when terminal is too small
This is the content of my .gnupg/gpg-agent.conf:
pinentry-program /usr/bin/pinentry-curses
When I try to retrieve a password from pass' store, e.g. via pass -c path/to/password in a very small-sized ...
- 1,012
1
vote
0
answers
183
views
GPG pinentry not receiving key presses during passphrase entry when forwarding gpg-agent
When forwarding my gpg-agent to a remote server I am able to see the my private key listed.
Even though I unlocked my key locally I still need to unlock it on the remote machine.
However when I try to ...
- 11
0
votes
1
answer
458
views
Why would GPG Pinentry be slow when opening in GUI but instantaneous when opening in CLI?
Having a hard time figuring out the debugging steps for this behavior.
I'll run some gpg command and, typically, about 20 seconds later a GUI Pinentry window will pop up where I type in my password ...
- 161
1
vote
1
answer
576
views
gpg/pinentry - Can't enter passphrase outside terminal
I am trying to decrypt a gpg file inside a script. When I run gpg -d file.gpg in the terminal, I get prompted to enter the password in a curses dialog box. But when I run a script containing that line,...
- 289
1
vote
1
answer
519
views
Remove "save in password manager" option in gpg pinentry
I have some libreoffice documents stored with "encrypt with gpg key" option. Today I was quite surprised when the document opened without requesting a passphrase. Eventually I found an ...
- 11
1
vote
0
answers
62
views
GPG pinentry, how to show requestor
So I have pinentry popping up whenever I fresh boot my desktop environment (i3), asking for my main GPG main key password. I perhaps configured at some point some program to read some pass entry, but ...
- 223
2
votes
1
answer
675
views
Can I configure pass to always use pinentry-curses?
I use pinentry-qt most of the time, but in the specific case that I'm using pass, I would like to use pinentry-curses because of the faster startup time.
Is there a way that I can configure pass to ...
- 803
2
votes
0
answers
177
views
Arch/ XFCE - Disable global keyboard grabbing for gcr/ gnome-keyring
I am using gnome-keyring as ssh-agent on my arch/ xfce system.
Since I have multiple ssh-keys, I additionally have a password manager to store their keys.
Adding those ssh-keys to the keyring works ...
- 191
1
vote
1
answer
360
views
how to navigate with pinentry
I was was using gpg --gen-key till I got to enter the passphrase where I get:
┌──────────────────────────────────────────────────────┐
│ Please enter Passphrase, │
│ ...
- 200
2
votes
1
answer
1k
views
pinentry not showing in tmux
I'm having some trouble getting gpg (actually pass which uses gpg in the background) to work inside of tmux and a Yubikey Neo. When attempting to decrypt a file or sign something using gpg I get the ...
- 125
3
votes
0
answers
890
views
Can't sign/encrypt unless I start gpg-agent manually
I recently set up Ubuntu in a VM for development work, but found that git couldn't sign my commits. Investigating further, I found that gpg-agent wasn't able to request my passphrase via pinentry-...
- 141
3
votes
0
answers
696
views
How can I suppress the pinentry dialogue box if there is no gpg password?
I'm using (neo)mutt with GPG. I've set my gpg password to empty, but when I attempt to decrypt an incoming email, mutt still presents a pinentry dialogue box. If I just press Enter (with no string), ...
- 18.1k
4
votes
1
answer
6k
views
How to make the default-cache-ttl option of gpg-agent work?
I use pass as a password manager. I would
like my passphrase to be cached during a certain amount of time to avoid
retyping my passphrase every time that I want to clip one of my passwords.
Pass is ...
- 61
1
vote
2
answers
2k
views
gpg2 pinentry fails without X
What is working
My gpg-agent pinentry works fine under X. I can run
echo "test" | gpg2 -ase --default-recipient-self | gpg2
to cache my passwords and later run killall gpg-agent -1 to flush them.
...
- 1,228
5
votes
0
answers
875
views
Intermingled input when using local gpg-agent from remote site
I'm starting a local gpg-agent on my Mac, with the extra-socket option. Then I connect to a remote site using SSH, forwarding the remote S.gpg-agent socket to the local S.gpg-agent.extra socket. This ...
- 268k
0
votes
1
answer
563
views
Configure Duplicity to use pinentry?
Duplicity by default asks for passwords to GnuPG keys on start up and caches them in memory throughout process lifetime. Is there a way to have it use /usr/bin/pinentry instead so I know I'm not ...
- 35.5k
1
vote
1
answer
2k
views
Problem configuring GPG pinentry
I have two hosts, A and B. On A I have the gpg pinentry program setup to be pinentry-curses but I have no idea how I did it anymore. I can not seem to find the difference between A and B, but on A (...
- 905
15
votes
2
answers
13k
views
How to get pinentry-curses to start on the correct tty?
I use gpg-agent for managing both PGP e SSH identities. The agent is started with a script like this
gpg_agent_env="$XDG_CACHE_HOME/gpg-agent.env"
export GPG_TTY="$(tty)"
if ! ps ...
- 293
3
votes
1
answer
279
views
Non-GUI based pin-entry for gpg
I'm in the process of remotely viewing and selecting hundreds of images, some of which are encrypted with a symmetric key. I log in to the remote desktop machine using ssh. The viewing is not fast, ...
- 35
4
votes
1
answer
2k
views
About pinentry usage along with gpg
Is mandatory to use pinentry with gpg2?
Why is pinentry better over legacy prompt?
- 3,939
4
votes
0
answers
364
views
Enigmail Thunderbird pinentry requests all passwords to all secret keys
I want to read a GPG encrypted email using Thunderbird Enigmail from Account.1@mail.com and Edit > Account Settings > Account.1 > OpenPGP Security has "Use specific OpenPGP key ID" selected.
However, ...
- 176
12
votes
2
answers
15k
views
Pinentry fails with gpg-agent and SSH
I'm running Fedora 22. I'm trying to setup GnuPG to have my SSH connections authenticated using my PGP authentication subkey that is located on my Yubikey Neo.
I have a systemd unit starting the gpg-...
- 1,887
2
votes
0
answers
2k
views
Decrypting with GPG after a "su - different user"
I have cron job running a script in the cron of "USER A" that encrypts many files in a loop using the gpg command below:
gpg --batch --cipher-algo AES256 --passphrase "PASSWORDISHERE" -c FILENAME
"...
- 21
1
vote
0
answers
872
views
How can I have pinentry ask if a password should be remembered?
In this answer, the password prompt for gpg-agent includes options for how long the password should be remembered.
However, in my system I get a much simpler prompt, without that option
How can I ...
- 5,041