Questions tagged [gnupg]

GNU Privacy Guard (GnuPG or GPG) is a GPL Licensed alternative to the PGP suite of cryptographic software. GnuPG is compliant with RFC 4880, which is the current IETF standards track specification of OpenPGP.

Filter by
Sorted by
Tagged with
0 votes
0 answers
19 views

deleted gpg key (secret and public) now I can't send emails in emacs mu4e

I lost a password of my key, so I deleted it now emacs complains when I send a mail via mu4e. I deleted my entire ~/.gnupg directory I regenerated the ~/.authinfo.gpg key via epa-encrypt-file I ...
user avatar
  • 101
0 votes
0 answers
21 views

gpgsm: Cannot import private key

For signing emails, I requested an S/MIME certificate using the German academic DFN service. AT the end of this process, I get a .p12 file (PKCS12). I can convert this file to PEM using openssl ...
user avatar
0 votes
1 answer
19 views

gpg auto-locate-key selects revoked key

I just configured WKD on my server, and gpg -v --auto-key-locate clear,wkd,nodefault --locate-key user@domain.com works as expected for most of my uid/key combos, except for one address (olduser@...
user avatar
  • 405
1 vote
1 answer
32 views

GPG stub for encryption subkey not working

I created the classical set of authentication, signature, and encryption subkeys with gpg, then moved them into a smartcard [ledger nano S], which seemed to work fine as I can see the three subkeys: $ ...
user avatar
  • 141
0 votes
0 answers
14 views

Arch Linux: Separate keyring for AUR?

I run Arch Linux on my primary machine, and I've installed several AUR packages using Yay. As part of the standard installation process, I've been importing developers' keys into my personal GPG ...
user avatar
0 votes
2 answers
63 views

how to loop and decrypt gpg files in a batch

Im trying to decrypt all gpg in a folder, but cant figure how to build a batch to read all gpg files and extract they in .zip files. What I have: xxx1.zip.gpg yyy.zip.gpg dddd.zip.gpg What I want:...
user avatar
  • 3
1 vote
1 answer
130 views

GPG key: No secret key

My OS went bonkers and I had to fully reinstall. This means I did not have the chance to export the current key I had and import it on the new installation. I generated the key locally, pushed it and ...
user avatar
0 votes
0 answers
22 views

How do you know if GPG verified the integrity of a downloaded file, and not just authenticated the signature?

How do you know when using GPG4Win/GnuPG/GPG to verify a downloaded file, if the file itself has been verified for integrity and has not been changed? Rather than just confirming the signature. How ...
user avatar
  • 87
2 votes
1 answer
208 views

Given a public key in hexadecimal, how can I get an .asc file?

Given a public key in hexadecimal or base 64, how can I generate an .asc file for use with PGP programs? For example, let's say I have someone's RSA public key, in hexadecimal: 04 40 ad 77 10 45 08 f2 ...
user avatar
  • 2,305
1 vote
1 answer
118 views

How to find the key ID in gpg to use with --export-ssh-key

I want to use gpg --export-ssh-key but I cannot figure out how to supply the key id. I have the following keys: > gpg --list-keys --keyid-format SHORT pub rsa3072/D54EC263 2022-04-30 [SC] ...
user avatar
  • 202
1 vote
1 answer
473 views

Thunderbird error when importing gpg key

I am using the latest version of thunderbird and trying to import a PGP key. I forgot my master password and so reset it using chrome://pippki/content/resetpassword.xhtml (from the official support ...
user avatar
  • 13
0 votes
1 answer
31 views

Does GpgOL attempt to grab public keys off a default keyserver?

I currently have a customer who noticed firewall logs pointing to a URL that was never used by them before. They blocked all traffic to and from the domain of another company that was recently hit by ...
user avatar
  • 1
0 votes
0 answers
82 views

GPG search-keys always returning Error searching keyserver: Certificate expired. How to resolve this?

I'm trying to verify a downloaded file using GnuPG in Windows 10. I had installed Gpg4win which installed GnuPG 2.3.4 My problem: The following command (in powershell) gpg --verbose --keyserver hkps://...
user avatar
0 votes
0 answers
9 views

manually verify the result of the creation of a Debian installation USB drive

Let's assume we produced a Debian installation USB flash drive via dd if=debian-live-11.2.0-amd64-gnome+nonfree.iso of=/dev/sde bs=4M; sync as recommended, where /dev/sde is our USB drive. Sometimes ...
user avatar
0 votes
1 answer
64 views

Can't retrieve gpg public key from Web Key Directory: Certificate expired

I'm trying to set up a Web Key Directory but both, the Direct and Advanced configuration according to https://wiki.gnupg.org/WKDHosting fail. Testing the setup with gpg -v --auto-key-locate clear,wkd,...
user avatar
1 vote
1 answer
394 views

gpg secret key access not possible - no pinentry

as this not seem to be a Arch Linux specific question (and the arch forum can't help me) I try to ask a broader range of experts. Since some days I can not access my kwallet anymore. Assuming the ...
user avatar
  • 111
0 votes
1 answer
275 views

Thunderbird 91 GnuPG configuration for encryption - without plugin Enigmail

Since version 78.1 of Thunderbird no longer works the plugin Enigmail. Now I use version 91 under Arch Linux and Manjaro Linux, together with a Yubico YubiKey 5 NFC. GnuPG setup is done and the ECC ...
user avatar
0 votes
0 answers
45 views

How to make sshd_config's StreamLocalBindUnlink work with ssh config's ProxyJump

Original problem: I need to forward gpg-agent to a remote system over ssh This remote system is not directly accessible to my local machine. I must first ProxyJump through an intermediary system to ...
user avatar
1 vote
1 answer
297 views

The Windows command line shows my GPG keys, but git bash does not?

I installed GPG4Win and Kleopatra on my Windows 10 system, and imported my public and private key files that were created on another machine. My goal is to sign my commits in Github using these keys (...
user avatar
  • 745
0 votes
1 answer
135 views

GPG periodically loses connection to yubikey on monterey

The connection between gpg and my yubikey appears to periodically fail. Decryption attempts are met with the pinentry-mac dialog "please insert card with serial number X". gpg --card-status -...
user avatar
0 votes
1 answer
41 views

Keep track of GPG keys

When running GPG I'm presented with the following screen: gpg (GnuPG) 2.2.20; Copyright (C) 2020 Free Software Foundation, Inc. This is free software: you are free to change and redistribute it. There ...
user avatar
0 votes
0 answers
41 views

Using GPG from another user (GNU/Linux)

I want to use gpg from another user (user2), so that the primary user (user1) does not have access to the encrypted file, but only to the part the script will output. Added a sudo rule for user1 to ...
user avatar
  • 101
1 vote
0 answers
117 views

How to use fingerprint reader to unlock password protected GPG key?

I'm using my laptop's fingerprint reader to unlock computer and for sudo. I also use a GPG key with password to sign my git commits. Is there a way to have the GPG key be unlocked with fingerprint? ...
user avatar
  • 151
2 votes
1 answer
561 views

How can I force dnf in Fedora 35 to download new GPG keys?

I am suddenly unable to update Keybase through dnf. I am getting the following error: Transaction Summary ================================================================================ Upgrade 1 ...
user avatar
0 votes
1 answer
177 views

gpg Timeout in WSL1 when signing

I am new to GPG keys. I created two in WSL to sign my git commits. However, I cannot use these keys because all sign commands would time out. gpg-agent gpg-agent[2416]: gpg-agent running and ...
user avatar
  • 131
1 vote
0 answers
27 views

Security implications of decrypting a PGP/GnuPG-encrypted file inside command substitution in bash

I use aqbanking to download my bank statements over HCBI. Normally, aqbanking will ask for the bank login credentials during download but you can also store these inside an unencrypted pinfile and ...
user avatar
1 vote
1 answer
303 views

Can't Verify "PGP SIGNED MESSAGE" in Linux

gpg ver. 2.1.18; Debian Stretch Public key duly imported from https://cygwin.com/key/pubring.asc I downloaded a pair of cygwin installation files from https://cygwin.com/install.html and they passed ...
user avatar
  • 131
1 vote
0 answers
660 views

gpg: Warning: not using '...' as default key: No secret key

I recently exported my secret key to a Windows server, and now it won't let me encrypt anything. When I run gpg --list-secret-keys, it shows up: sec rsa2048 2019-06-21 [SC] [expires: 2023-06-25] ...
user avatar
  • 11
1 vote
0 answers
205 views

Downgrade GnuPG using brew

I need to downgrade GnuPG in my system, so what I did was to first uninstall it: brew uninstall gnupg it uninstalled successfully (apparently) Then I tried to install again the needed version: brew ...
user avatar
0 votes
0 answers
39 views

Public pgp key can not delete a keyring (GnuPG)

I received a key without a UID and it now appears I cannot delete from the key ring. gpg --list-keys |tail -5 pub ABC12/1234ABCD 2021-12-03 uid sub ABC12/ABCD1234 2021-12-03 I get an error when I ...
user avatar
  • 111
0 votes
1 answer
121 views

Duplicity - GPG key encryption with multiple devices

I'm struggling to have a working and robust configuration for my backups using Duplicity, knowing that I want asymemtric GPG encryption based on key pairs. And to be able to backup securely from ...
user avatar
0 votes
1 answer
228 views

GPG not restarting the GPG-Agent

I am trying to restart the gpg-agent with the command: gpgconf --kill gpg-agent This should, according to multiple answers on this forum, lock my GPG-Keys and ask for a password, when I want to use a ...
user avatar
  • 3
0 votes
1 answer
56 views

Convert GPG key to SSH

I'm currently using gpg-agent to authenticate when I use SSH. However, I would like to go back to just using a plain SSH key without GPG being involved. Is there a way to extract my GPG private key ...
user avatar
  • 185
1 vote
2 answers
310 views

In GnuPG (GPG), how to clear lower 3 bits of ed25519 secret key?

Some time ago I generated an ed25519 GnuPG (GPG) keypair using the gpg command line utility. Now, when I import this key into gpg, I get a warning: gpg: key 0123456789ABCDEF: public key "User ...
user avatar
  • 143
0 votes
2 answers
492 views

Cannot fetch GPG public keys with Kleopatra in Windows

Edit: I resolved the problem myself. Please see my answer below. In Kleopatra (Windows), I have the following key server When I try to fetch the GPG public key of XUbuntu (...
user avatar
  • 193
1 vote
1 answer
63 views

Why does GPG ask for passhrase when ~/.gnupg/gpg-agent.conf exists?

Using GPG 2.2.19, libgcrypt 1.8.5 on Ubuntu 20.04.3 I use GPG to sign git commits and to decrypt password savec in the Unix Password manager pass. Everything is working perfectly. ie. GPP works ...
user avatar
16 votes
2 answers
3k views

Should I create separate GPG key pairs or just one GPG key pair for multiple uses (e.g. email, sign commits)?

Would it be better to create a GPG key pair for each use case or is it considered best practice to create just on GPG key pair for multiple use cases? Here are my reasons for using GPG keys: to sign ...
user avatar
  • 263
2 votes
2 answers
968 views

Unable to distribute a GPG public key when never expires, because it has expired

I have previously distributed a public public key successfully ( for signing open source ), but having returned to the open source project after a few months the build has been unable to locate the ...
user avatar
  • 23
1 vote
1 answer
222 views

Why has my gpg key been revoked (should I be concerned)?

I've been using my public/private key pair for multiple years on my own machine for local purposes only and I've experienced the yearly expiration. However, this time (around the time my key usually ...
user avatar
  • 133
1 vote
2 answers
715 views

How to export the private SSH subkey from gpg?

I'm able to export the public key using gpg2 --export-ssh-key 15EDA5801C8D18FF. How do I get the private SSH subkey? Asked this question way too complicated here as well
user avatar
  • 111
0 votes
0 answers
64 views

Using Yubi Key to decrypt data on remote server

I'm trying to use a Yubi Key to decrypt data on a remote server that I authenticate to by ssh. I forwarded the gpg-agent, the gpg-agent.conf is: enable-ssh-support default-cache-ttl 60 max-cache-ttl ...
user avatar
0 votes
1 answer
78 views

gpg2: change someone's public key expiration date

Is there a way to change someone's public key expiration date? I have two keys for the same user - old (key A), with no expiration date, and current (key B), with expiration date in the future. I want ...
user avatar
  • 476
0 votes
0 answers
30 views

How to enable GPG key authentication alongside SSH?

At work I use SSH keypairs to access 5x important servers, on a daily basis. Nothing exciting about that. But I've recently been asked to provide a GPG public key in order to access a 6th system, ...
user avatar
  • 1
2 votes
1 answer
100 views

GPG encryption is slow on macOS 11.5.2 after PKSIGN step

For some reason GPG appears to take a long time, 2-3 seconds, when encrypting anything. This makes it especially hard to use with git since commits are slow and rebases are glacial. $ time (date | gpg ...
user avatar
  • 3,173
0 votes
0 answers
11 views

How can I see what has requested a signature from gpg-agent?

How can I tell which program is currently asking gpg-agent for a signature? Or put differently, before I decide whether to enter my GPG pin for example, how do I know what I'm about to sign? How can I ...
user avatar
  • 457
0 votes
1 answer
232 views

Import OpenPGP key (on NixOS)

I am trying to import a PGP key into NixOS (exported from Openkeychain). This key is used to encrypt and decrypt a list of passwords (with pass). The following are the steps to reproduce the issue (...
user avatar
  • 101
0 votes
0 answers
34 views

Build Gpgmepp on CMake GUI using MSVC/MinGW Compiler Error Occur

I am trying to build Gpgmepp library from source code in CMAKE GUI but the following error occurs. Selecting Windows SDK version 10.0.19041.0 to target Windows 10.0.18363. The C compiler ...
user avatar
1 vote
1 answer
242 views

In GNUPG Kleopatra, what does "+RSA" do when generating a key?

A customer of ours wants us to create PGP keys similar to those created by GPG's Kleopatra utility when the GUI option "+RSA" is checked. We don't use Kleopatra, and would like to know just ...
user avatar
  • 111
0 votes
1 answer
27 views

GpgmeppConfig.cmake not found

I am using Craft for building Linux applications in Windows, but the following error occurs when building a Linux application: CMake Error at CMakeLists.txt:44 (find_package): Could not find a ...
user avatar
0 votes
1 answer
65 views

Where does Windows store the secring?

I can't find where GnuPG located my secring (actually, I can't find any gpg files, onlykbx files), as all I have in %AppData%\gnupg is:
user avatar
  • 1

1
2 3 4 5
16