Questions tagged [gnupg]
GNU Privacy Guard (GnuPG or GPG) is a GPL Licensed alternative to the PGP suite of cryptographic software. GnuPG is compliant with RFC 4880, which is the current IETF standards track specification of OpenPGP.
204
questions with no upvoted or accepted answers
9
votes
1
answer
400
views
Echo asterisks/passphrase as it's being typed in gnupg with tty pinentry
I'm using gnupg with tty pinentry agent to encrypt a file with a symmetric passphrase. When I'm typing it, both to encrypt and decrypt the file, gnupg's tty pinentry avoid displaying the characters I'...
- 415
8
votes
1
answer
2k
views
OSX: gpg command error, dyld: Library not loaded:
After I migrating my MacBook, I found out I miss the command gpg.
And it threw this error when I wanted to install rvm
⋊> ~ gpg 15:...
- 201
8
votes
1
answer
6k
views
How can I export public key in PEM format with GnuPG?
I'm writing SW that uses opessl library for verifying DSA signatures. I have public keys from senders in gpg format. How can I convert those into .pem so that openssl can read them?
I found this from ...
- 81
7
votes
0
answers
1k
views
Add a UID to your GPG key, but don't make it primary
Whenever you add a new UID to your keypair, GPG will automatically make it primary. Is there any way to add a key that isn't immediately marked as primary?
Although I could manually change the ...
- 3,997
6
votes
2
answers
5k
views
How to configure PuTTY + gpg-agent to connect an SSH Linux server
I have a key-pair generated with Kleopatra (from Gpg4win 3.0 suite). I've converted the public key to an RSA ssh key and add it to the authorized_keys file in a Linux box.
On the Windows machine I've ...
- 161
5
votes
0
answers
1k
views
GPG agent over SSH (with vagrant)
I'm using vagrant for building and signing my debian/ubuntu packages but I'd prefer to not have have to copy my GPG keys into the virtual machine just to sign packages. It just feels insecure. Is ...
- 1,177
5
votes
0
answers
2k
views
GPG Agent under Windows as SSH Agent for git bash
I'm trying to set up gpg-agent as the common authentication agent under Windows. It works fine for both Putty and regular gpg use, but now I'd like to use it as ssh-agent in git bash as well.
From ...
- 2,913
5
votes
0
answers
1k
views
How to use Unicode in "Real Name" bit of key?
GPG appears to support Unicode, but I can't get it to actually work
% gpg --utf8-strings --display-charset utf-8 --edit-key [email protected]
gpg (GnuPG) 1.4.15; Copyright (C) 2013 Free Software ...
- 2,492
5
votes
2
answers
4k
views
automatically encrypt and decrypt emails using gnupg (gpgrelay for unix)
My point of view related to email security is: whenever possible emails should be protected with PGP/GPG while transporting, but it doesn't have sense to store encrypted emails in local mailbox (this ...
- 173
5
votes
0
answers
1k
views
gpg-agent asks for ssh password, although the private key has no password set
I am using gpg-agent to manage my github ssh key. I generate my (private) ssh key via openpgpg2ssh from my private gpg key. Unfortunately, although my private gpg key is not password protected, gpg-...
- 51
4
votes
0
answers
5k
views
gpg: skipped "12345689": Unusable secret key / how to use signing subkey for gpg?
As you see, I have a key with id 12345689, and I'm trying to sign with it in git
gpg -k
/home/lz/.gnupg/pubring.kbx
---------------------------
pub rsa4096 2020-03-02 [C]
12345689
uid ...
- 141
4
votes
0
answers
477
views
libreoffice how to digitally sign pdf export with gpg key
I am trying to export as a pdf and add a signature, or add a signature to an existing pdf, but whenever I try to export, after selecting a gpg key to use for the certificate (I don't fill in any of ...
- 151
4
votes
1
answer
759
views
How can I update the signature of a pgp subkey
My public pgp key has a sub key with a signature (self signed) that contains an invalid policy url. How can I update the signature and remove the policy?
Using gpg (GnuPG) 1.4.21 on macOS Sierra, 10....
- 161
4
votes
0
answers
980
views
How do I avoid GPG-signing others' commits?
I've set a global Git config commit.gpgsign = true to automatically sign commits that I make. However, when I rebase or cherry-pick commits, it seems to sign all of them, even if I'm not the author.
...
- 8,870
4
votes
1
answer
1k
views
Error with GPG Smartcard fetching public subkey
I'm trying to setup an OpenPGP smartcard using a YubiKey.
It's a YubiKey 4, so in theory should accept a 4096 bit secret key, but I'm using 2048 bit subkeys.
I have a master key (set for cert only), ...
- 41
4
votes
0
answers
2k
views
How can OpenSSL Secret Keys be imported into GnuPG?
I want to import the secret key from a OpenSSL x509 (Client) Certificate into GnuPG (NOT gpgsm for S/MIME!)
I have seen there are utilities to convert GPG Keys into SSH Format [1] and even create ...
- 41
4
votes
1
answer
2k
views
Pass doesn't ask for passphrase
I am using pass (http://www.zx2c4.com/projects/password-store/) on ubuntu 12.04.
Process:
apt-get install pass
gpg --gen-key
pass init <generated gpg id>
pass insert test
pass test
After the ...
- 41
4
votes
0
answers
535
views
Graphical interface to git with support for signed commits?
Is there any graphical interfaces to Git with support for gpg signed commits?
I've tried the "Tools" -> "Add..." way of the builtin git gui that comes with git but that doesnt work with commit -S.
...
- 141
4
votes
1
answer
4k
views
How do I integrate GPG with alpine?
I have tried a couple of howtos, but they seem to either be too out of date or just plain don't work (don't work for me, at least).
How do I sign and encrypt messages, as well as check integrity of ...
- 579
3
votes
0
answers
2k
views
Public key won't import in GPG, "no valid user ID", "unknown algorithm 100"
I received a public key, starting in
-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: PGP Desktop 10.2.1 (Build 5033)
When I --import it, I get (some fields substituted with x)
gpg: key CC49xxxxxxxxxxxx:...
- 766
3
votes
0
answers
305
views
What do I have to do in CMD.EXE and/or PowerShell to specify a file (-o) with umlaut-characters when decrypting a file with gpg?
In cmd.exe and PowerShell, I am able to encrypt a file into a file whose filename contains umlaut-characters:
gpg -c --batch --yes --passphrase "one two three" -o bärlauch.gpg data.txt
...
- 2,364
3
votes
0
answers
92
views
How can I label a GPG key I received
I got a public GPG key from John Doe, but I know him better as computer_lemon2929 on superuser.com. Every time I need to encrypt something to him or come across a signed commit or whatever of his I ...
- 31
3
votes
1
answer
3k
views
Using PAM to unlock pass (gpg-preset-passphrase)
I'm using pass as my password manager with the browserpass plugin and passmenu. Currently I have to unlock my GPG keys manually in the console before I can use the plugin on a website (otherwise it ...
- 131
3
votes
0
answers
1k
views
How to sign with a specific subkey using GnuPG?
Say I have two subkeys like below.
/c/Users/user/.gnupg/secring.gpg
---------------------------------
sec 2048R/DC****** 2017-05-25
uid J D <[email protected]>
ssb 2048R/...
- 936
3
votes
0
answers
1k
views
How to install gpg-zip on Mac OS Mavericks?
I used to use gpg-zip on my Mac. I recently upgraded my system to Mavericks 10.11.6 and had to reinstall gpg and gpg2. I used homebrew to install gpg2, but gpg-zip wasn't installed. I tried ...
- 141
3
votes
0
answers
2k
views
gpg: xxxx: skipped: public key not found
I'm getting this error:
gpg: xxxx: skipped: public key not found gpg: [stdin]: encryption failed: public key not found
I'm using this code:
IEncryptionService encryptionService = new ...
- 31
3
votes
1
answer
2k
views
Why is "GPG -K" not showing all keys listed by "GPG --edit"?
Issue: I get a different list of secret keys when using gpg -K than gpg -edit, and the missing keys can no longer be used to decrypt. How do I fix this?
Example:
C:\...\>gpg --edit 11111111
gpg (...
- 61
3
votes
1
answer
84
views
GPG: conventions for adding a UID that isn't an email
I want to add various accounts to my GPG public key, e.g. GitHub and Twitter, so that others can verify that they are my accounts. Is there any convention for this?
Usually the UID is defined in the ...
- 131
3
votes
1
answer
1k
views
FreeBSD install PECL php7
I want to active the gnupg extension for php7. But I can't find a package for pecl for php7.
Does anyone know a way to install pecl for php7 or how to activate gnupg without pecl?
- 153
3
votes
0
answers
526
views
Preveting DNS Leaks using gnupg over TOR while allowing key-fetching via DNS
Using DANE to associate OpenPGP public keys with email addresses becomes more and more popular. There are different methods implemented in GnuPG and used like pka and cert. IETF just released a new ...
- 77
3
votes
0
answers
3k
views
gpg-agent fails with "command get_passphrase failed: End of file" on pinentry
I'm trying to use Enigmail with Thunderbird on Linux. GPG itself is set up, keys imported and I already can use the key management functions (including signing of keys) from kgpg.
But Mail encryption ...
- 938
3
votes
2
answers
2k
views
GPG Symmetric Encryption: No Secret Key
Using gpg 2.0.22 I do the following as user A:
A@~: touch tmp
A@~: gpg -c --cipher-algo AES256 tmp
A@~: chmod 777 tmp.gpg
A@~: su -l root -c 'mv tmp.gpg /'
Then, as user B:
B@~: gpg /tmp.gpg
Now I'...
- 29
2
votes
0
answers
247
views
VSCode unable to sign commits
If I try to commit something, I'm getting this error.
> git -c user.useConfigOnly=true commit --quiet --allow-empty-message --file - -S
error: gpg failed to sign the data:
gpg: skipped <redacted&...
- 175
2
votes
0
answers
1k
views
Downgrade GnuPG using brew
I need to downgrade GnuPG in my system, so what I did was to first uninstall it:
brew uninstall gnupg
it uninstalled successfully (apparently)
Then I tried to install again the needed version:
brew ...
- 121
2
votes
1
answer
2k
views
Decrypting tar archives with gpg -d, the -d flag does not work
My OS is Ubuntu 20.04.2 lts.
I am creating a tar archive from the dir noup1, that contains files and subfolders, with tar cf no1.tar noup1
Encrypt it with gpg -c no1.tar. So now I have a no1.tar.gpg ...
2
votes
1
answer
447
views
Can't revoke GPG key on Ubuntu keyserver
I am trying to revoke a GPG key on the Ubuntu keyserver. I have imported the revocation certificate into my GPG keychain and have used gpg --keyserver http://keyserver.ubuntu.com --send-key ...
- 141
2
votes
1
answer
2k
views
Can I tell the gpg-agent to never ask me for a password?
I am working with a remote SVN repo every day, running on Ubuntu 20.04 on WSL2. But I don't want to enter the SVN sever password every time I update or commit. So I enabled the GPG password store like ...
- 193
2
votes
1
answer
764
views
How does GPG internally determine which key(s) to try to decrypt a given input encryption blob with?
I've been wrestling with GPG lately, and I have just (finally!) got it working. I can now input an encrypted blob to gpg.exe and it will output the plaintext version, assuming that it's a valid ...
- 21
2
votes
0
answers
5k
views
How to automatically check if key in a gpg file is expired without importing
I want to check if key in a gpg file is expired without importing so I tried this :
$ gpg --list-options show-sig-expire my_key.gpg
pub 2048R/8719FCE4 2016-09-28 home:stevenpusser OBS Project <...
- 1,803
2
votes
0
answers
260
views
Is it possible to reduce the expiry date of public key in gpg?
If I created a GPG public key with an expiration after 10 years and later I wanted to reduce it to 5 years, is it possible?
Also, if I already published the key to a key server, how to make changes ...
Thinker
2
votes
0
answers
3k
views
Convert GPG private key to QR code?
How can I generate a QR code from a OpenPGP/GnuPG private key on Windows 7?
Context:
I created a private key pair on a Windows computer and want to import the key to my phone. The phone app has ...
- 115
2
votes
0
answers
1k
views
gnupg keyserver configuration
I am on macOS, running gpg (GnuPG) 2.2.10.
I am trying to use hkps://hkps.pool.sks-keyservers.net as my keyserver. Since keyserver option for gnupg is deprecated, I add this to ~/.gnupg/dirmngr.conf:
...
- 163
2
votes
0
answers
398
views
How do I avoid all passphrase prompts for GPG2's asymmetric decryption?
I've made my own program which utilizes gpg for encrypting and decrypting (both symmetric and asymmetric). It works fine with gpg1 on all accounts, and it works fine with gpg2 for both kinds of ...
- 185
2
votes
1
answer
761
views
Create a password-protected archive of a directory on a remote machine
Here is what I would like to achieve:
There is a rather large (~15TB) directory on a local machine that I would like to archive on a remote machine.
These are the prerequisites I thought of
...
- 121
2
votes
1
answer
419
views
gpg-agent doesn't background
Maybe I am misunderstanding, but when I launch gpg-agent, it never goes into the background.
$ gpg-agent --daemon --verbose
gpg-agent[16136]: listening on socket `C:\Users\OliverSalzburg\AppData\...
- 87.5k
2
votes
0
answers
68
views
Mail encryption on Windows RT
Is it somehow possible to use mail encryption preferably via GPG on Windows RT?
Since on a Windows RT Surface tablet you only have access to Windows Mail as an app in the store, there is no fancy ...
- 121
2
votes
0
answers
768
views
How to verify a software package using SHA256 checksums and PGP or GnuPG keys, on Windows?
I'd like to verify the Vagrant installation method using their recommended verification method. On the installation page it says:
You can find the SHA256 checksums for Vagrant 1.7.4 online and you ...
- 191
2
votes
0
answers
427
views
Why does using Enigmail with Icedove on Debian fail if I don't start gpg-agent manually?
I'm using Icedove on a Debian Sid installation, and now I try to use Enigmail with it. But I encounter some issues:
I had to create my keys with gpg2 instead of Enigmail, because it didn't want to ...
- 21
2
votes
0
answers
500
views
Export P12 from GnuPG for PDF signing field
It seems to be possible to export a PGP .asc file to .p12, but I'm unable to use the generated .p12 file for a signature field in a PDF file. Is there a way to export it so it's usable for that field, ...
- 131
2
votes
1
answer
2k
views
How to remove an imported key during rpm uninstall
I'm creating an RPM package (let's call it Foo) that contains a gpg key that will be used to sign other RPMs. During the postinstall script for Foo, I execute 'rpm --import [keyfile]' to import the ...
- 21