Questions tagged [gpg-agent]

GPG-Agent is a daemon to manage secret (private) keys independently from any protocol. Questions related to encrypting and signing data with GnuPG aka GPG can be tagged with GPG-Agent

Filter by
Sorted by
Tagged with
1 vote
0 answers
35 views

YubiKey Authenticator App doesn't recognize YubiKey after unlocking the card via PinEntry

I've got a pretty basic password/OTP set up on macOS: my YubiKey has the sig/aut/enc subkeys to encrypt/decrypt my passwords in the password store my OTPs are solely on my YubiKey - I use the Yubikey ...
tpschmidt's user avatar
  • 111
2 votes
0 answers
745 views

Why gpg-agent not running after Windows 10 restart?

I have configured Putty to run with Yubikey for SSH connections following procedure here. I have configured remote server to accept only key connection. Everything was working as expected. After ...
AlexVal's user avatar
  • 46
0 votes
0 answers
316 views

Unable to forward gpg agent

My goal is to make commit on a remote server. The problem is when I tried to $ git commit -m "test". It throws error mini-mini-01:~/test$ git commit -m "a" error: gpg failed to ...
Jason Rich Darmawan's user avatar
0 votes
0 answers
628 views

gpg --pinentry-mode loopback too much data for the ICP layer in CLI (non-gui) mode?

When I use X11 GUI mode, I can enter my passphrase through the prompt without errors: 'gpg -d <my encrypted file>'. However, when I try the same from a CLI (windowless mode) specifying pinentry-...
John McGreen's user avatar
1 vote
1 answer
783 views

aws-vault: prompt for pass password if necessary

I'm using pass as a backend to aws-vault on a remote machine and it seems like I need to manually add the "password" for the profile into gpg-agent before aws-vault can make use of it. ...
Keltek's user avatar
  • 111
0 votes
0 answers
282 views

Generate GPG key on Windows 10 gives error message

gpg --generate-key This is the error message I'm getting: We need to generate a lot of random bytes. It is a good idea to perform some other action (type on the keyboard, move the mouse, utilize the ...
user avatar
0 votes
2 answers
1k views

Remembering gpg passphrase in Win 10 and Ubuntu

What can I do to forget about typing the passphrase again and again for the commits? There's this answer about Kleopatra, but apparently the UI has changed and there's no option for cached passphrase.
Lippiece's user avatar
0 votes
2 answers
2k views

Unable to use Windows OpenSSH agent with GPG Agent and Yubikey

I have a Yubikey which has ed25519 certificates loaded onto it. One of these is an authentication certificate. I'm able to export the sha has of this by running gpg --export-ssh-key {key_id}, and ...
Desultory's user avatar
  • 308
1 vote
1 answer
187 views

GPG: notify before password prompt in terminal

I use GPG to encrypt a file in a shell script (in Linux). The file to be encrypted is created for a long time, so the script is executed in background, and I don't see when the password prompt is ...
Canis Lupus's user avatar
2 votes
1 answer
4k views

gpg secret key access not possible - no pinentry

as this not seem to be a Arch Linux specific question (and the arch forum can't help me) I try to ask a broader range of experts. Since some days I can not access my kwallet anymore. Assuming the ...
KK-Media's user avatar
  • 131
0 votes
1 answer
1k views

GPG not restarting the GPG-Agent

I am trying to restart the gpg-agent with the command: gpgconf --kill gpg-agent This should, according to multiple answers on this forum, lock my GPG-Keys and ask for a password, when I want to use a ...
Enemoy's user avatar
  • 3
2 votes
1 answer
312 views

GPG encryption is slow on macOS 11.5.2 after PKSIGN step

For some reason GPG appears to take a long time, 2-3 seconds, when encrypting anything. This makes it especially hard to use with git since commits are slow and rebases are glacial. $ time (date | gpg ...
a paid nerd's user avatar
  • 3,361
0 votes
0 answers
24 views

System hook to look for an encrypted file instead

How to setup a system hook so that whenever the content of /path/to/file is requested, the system does the following First check if /path/to/file exists. Act normally if it does. If it does not exist,...
Student's user avatar
  • 121
4 votes
0 answers
5k views

gpg: skipped "12345689": Unusable secret key / how to use signing subkey for gpg?

As you see, I have a key with id 12345689, and I'm trying to sign with it in git gpg -k /home/lz/.gnupg/pubring.kbx --------------------------- pub rsa4096 2020-03-02 [C] 12345689 uid ...
Rafaelo's user avatar
  • 141
2 votes
1 answer
1k views

duplicity - gnupg - no secret key - no passphrase given

I have a problem with duplicity and gpgnu. Environment (Software): Ubuntu 20.04 gpg (GnuPG) 2.2.19 (from package) libgcrypt 1.8.5 (installed from package) duplicity 0.8.18 (installed manually, since ...
pallago's user avatar
  • 121
1 vote
1 answer
1k views

SSH authentication using gpg-agent and another source for keys?

tl;dr: Is there a way to either disable the persistent import functionality of gpg-agent or work around that to allow using different sources for SSH keys? Situation I use GnuPG 2 keys (on a YubiKey) ...
Thomas Luzat's user avatar
0 votes
0 answers
3k views

gpg-agent ssh-support throwing sign_and_send_pubkey: signing failed for RSA "(none)" from agent: agent refused

I am using Arch Linux and gpg (GnuPG) 2.2.27. Trying to do a ssh-support with gpg, This i used along with git ssh public key authetication. For that i created a pubic key from gpg. When the socket ...
Vipin's user avatar
  • 217
0 votes
1 answer
694 views

gpg-agent hangs after failed exit from password prompt

After trying to connect to an existing gpg-agent (with keychain for linux) and entering the password for it in the terminal with pinentry-curses, I for some reason failed to enter it correctly, and ...
Connor's user avatar
  • 301
2 votes
1 answer
2k views

Can I tell the gpg-agent to never ask me for a password?

I am working with a remote SVN repo every day, running on Ubuntu 20.04 on WSL2. But I don't want to enter the SVN sever password every time I update or commit. So I enabled the GPG password store like ...
Matthias's user avatar
  • 193
0 votes
0 answers
172 views

GPG piping help for an S3 encrypted postgresql backup into RDS

I was wondering if there was a trick that I am missing. I am trying to get an encrypted Postgresql backup dump from S3 -> decrypt it in GPG -> pg_restore into RDS. However, I am not able to get ...
Jonathan's user avatar
  • 101
3 votes
2 answers
4k views

gpg-preset-passphrase: caching passphrase failed: Not supported

I am building a script that is using msmtp to send myself regular system reports by email. I have used gpg to encrypt my email password and used password-eval in msmtp.conf. I sent a test email ...
iLW's user avatar
  • 161
3 votes
1 answer
7k views

Cannot find gpg.conf and gpg-agent.conf using gpg 2.2.12 on Raspbian Buster

I am using gpg to encrypt my email password that I pass on to msmtp in order to send email. I initially ran gpg --full-gen-key to generate a pair of keys. During the process, it asked me for a ...
iLW's user avatar
  • 161
4 votes
1 answer
1k views

yubikey/gpg-agent always asking for my PIN when running git commit

recently, git has been asking me for my yubikey pin every 3 or 4 times after i've already typed in my pin. this didn't use to happen before. i'm thinking maybe the card isn't getting read correctly or ...
reuel's user avatar
  • 41
6 votes
3 answers
3k views

gpg2 running unreasonably slow, only when agent does not have password cached

Recently, my pass password manager has started taking upwards of 45 seconds to bring up the gpg-agent password prompt for my master password, which is super annoying when I'm trying to log into a ...
Soren Bjornstad's user avatar
0 votes
1 answer
1k views

GPG autologin with pam, pinentry

Recently I started using Neomutt with Luke´s mutt-wizward and therefore I have to setup pass and gpg, which were both new to me. I know how public and private key encryption works but after playing/...
braunbearded's user avatar
11 votes
3 answers
8k views

I want to make pinentry use GUI locally and CLI on SSH

I need to be able to GPG-sign git commits in two different Linux environments. In a full GUI X-Window setup using the GUI-based password dialog box In an SSH, without X-forwarding, using command-line ...
Chindraba's user avatar
  • 1,983
1 vote
1 answer
786 views

Can I run gpg-agent as a regular user on Fedora?

Can I start gpg-agent as a non-root user on Fedora (or RHEL or CentOS)? If I run 'gpg-agent' it says "no gpg-agent running in this session"
Tor Klingberg's user avatar
6 votes
1 answer
7k views

gpg-agent: a gpg-agent is already running - not starting a new one

Trying to configure gpg in a way that I enter passphrase only once, and it will work for the whole session. However, this is what I'm getting: $ pgrep gpg-agent | wc 0 0 0 $ gpg-...
xpt's user avatar
  • 8,551
3 votes
1 answer
4k views

Why does gpg4win's gpg-agent not authenticate me to ssh?

Preamble My understanding of gpg and ssh is medium-technical as a programmer and crypto-fan, but I'm not a huge pro in either's nitty-gritty details like configuration, "trivia" like alphabet soup ...
Marnes's user avatar
  • 221
3 votes
1 answer
3k views

Using PAM to unlock pass (gpg-preset-passphrase)

I'm using pass as my password manager with the browserpass plugin and passmenu. Currently I have to unlock my GPG keys manually in the console before I can use the plugin on a website (otherwise it ...
Dennis Hein's user avatar
1 vote
1 answer
2k views

How to set up SSH key forwarding with gpg-agent?

I am using an SSH key on a Yubikey, so I am using gpg-agent in place of ssh-agent. This is fundamentally working fine, except for the standard quirks (have to kill the scdaemon from time to time). ...
Kevin Keane's user avatar
1 vote
2 answers
2k views

Decrypting file attempts to use sub-key and then gives 'No secret key' error

Using: gpg (GnuPG) 2.0.22 libgcrypt 1.5.3 I am trying to decrypt a file from a remote site. I exported our key to a file. gpg <filename> returns: (Key IDs changed) pub 2048R/656CC421 2018-04-...
Noobux's user avatar
  • 11
0 votes
0 answers
191 views

Have gpg-agent start with ssh key file when available, falling back to gpg keys?

On linux (Fedora) using bash, I have setup the GnuPG gpg-agent to act as the ssh-agent successfully. When authenticating over ssh, the agent tries the gpg keys first then falls back to the ssh keyfile ...
John's user avatar
  • 101
2 votes
0 answers
657 views

Globally set environment variables for gpg-agent in MacOS High Sierra

I want to use gpg-agent instead of ssh-agent in MacOS High Sierra. To achieve this I need to set globally two environment variables: GPG_TTY=$(tty) SSH_AUTH_SOCK=${HOME}/.gnupg/S.gpg-agent.ssh This ...
drew1kun's user avatar
  • 2,127
6 votes
2 answers
5k views

How to configure PuTTY + gpg-agent to connect an SSH Linux server

I have a key-pair generated with Kleopatra (from Gpg4win 3.0 suite). I've converted the public key to an RSA ssh key and add it to the authorized_keys file in a Linux box. On the Windows machine I've ...
user2641103's user avatar
2 votes
2 answers
7k views

How to properly start gpg-agent on Ubuntu 16.04

I have a Yubikey4 loaded with my gpg-key, acting as a smartcard. I can do gpg2 card-status and it gives me the whole shebang showing all my subkeys and everything is fine. I then wanted to use gpg-...
chriskvik's user avatar
0 votes
1 answer
65 views

GPG (xubuntu) - old password works instead of new one

6 months ago I changed my GPG keys password. In shell it seems to work alright. But encrypted file can be decrypted in two ways: with command in terminalgpg file.txt.asc - new password works. Old one ...
Sebastian's user avatar
  • 111
6 votes
2 answers
9k views

Gpg-agent under Windows as SSH Agent for git bash

gpg-agent has options "--enable-ssh-support" and "--enable-putty-support" that allows it to use it as a drop-in replacement for the well-known ssh-agent. I've been pulling my hair out trying to ...
Ron's user avatar
  • 181
6 votes
3 answers
6k views

GnuPG 2.2 refuses secret key import: "error sending to agent: operation cancelled"

I'm trying to import my PGP identity including secret keys to a new computer by connecting to a computer which has the secret key, and running ssh othercomputer cat myself.gpg | gpg2 --import When ...
kqr's user avatar
  • 191
4 votes
2 answers
4k views

Why is gpg-agent/pinentry not available when signing commits with git?

Currently, I am on Windows running git 2.15.0.windows.1, gpg 2.2.1, and gpg-agent 2.2.1. I am trying to sign a commit with git via pinentry/gpg-agent, however, when signing a commit via git, pinentry ...
Judge2020's user avatar
  • 167
1 vote
1 answer
2k views

Yubikey not detected by gpg-agent and pcsc_scan on LMDE

I have an issue regarding the GPG agent that prevents me from using several commands and particularly the one that enforces the user to touch the key before signing. I am on Debian 8.9 / Linux Mint ...
NaeiKinDus's user avatar
0 votes
1 answer
724 views

GnuPG outputting rubbish when trying to use the encrypt option

I've been using GnuPG fine for the past year or so, but I haven't encrypted anything directly from the CLI for a while. I've been trying to do it today and this is the weird output I get. Doesn't ...
robotmay's user avatar
  • 241
3 votes
1 answer
6k views

How to set the default GPG encryption key?

Say I am using only one encryption key most the time. How do I set the default encryption key in order to avoid mentioning it in the encryption command In other word, I want this command: gpg -e ...
user123456's user avatar
5 votes
3 answers
3k views

gpg-agent ignoring cache config macOS sierra

I installed gpg via homebrew. I have a ~/gpg-agent.conf file as follows: allow-preset-passphrase default-cache-ttl 1209600 max-cache-ttl 1209600 max-cache-ttl-ssh 1209600 My .bashrc (actually: ~/....
notbrain's user avatar
  • 598
7 votes
5 answers
16k views

Can't import key with gpg on arch linux

I'm a arch 4.9.8-1 system. I wanted to install linux-vfio kernel for gpu passthrough and to fix a problem with a bad IOMMU group. Trying to install the linux-vfio kernel I got the following error for ...
Haroon's user avatar
  • 71
13 votes
4 answers
18k views

How to prevent gpg-agent from timing out during passphrase collection?

I'm calling out to gpg2 in a CLI script for symmetrical encryption of a local file. It appears to have gpg-agent prompt for a passphrase via some CLI, text based UI. As long as I'm around to enter the ...
rcampbell's user avatar
  • 613
3 votes
0 answers
896 views

keychain: Warning: can't find gpg key; skipping [closed]

I'm trying to use keychain(1) with my GnuPG key on Debian Testing. However, I get the following message with this command: $ keychain --agents gpg MYPGPKEY * keychain 2.8.2 ~ http://www.funtoo.org ...
Petr Razumov's user avatar
3 votes
1 answer
2k views

Why is "GPG -K" not showing all keys listed by "GPG --edit"?

Issue: I get a different list of secret keys when using gpg -K than gpg -edit, and the missing keys can no longer be used to decrypt. How do I fix this? Example: C:\...\>gpg --edit 11111111 gpg (...
opendna's user avatar
  • 61
2 votes
1 answer
414 views

gpg-agent doesn't background

Maybe I am misunderstanding, but when I launch gpg-agent, it never goes into the background. $ gpg-agent --daemon --verbose gpg-agent[16136]: listening on socket `C:\Users\OliverSalzburg\AppData\...
Oliver Salzburg's user avatar
26 votes
1 answer
15k views

How to delete a subkey on Linux in GnuPG?

I would like to delete an OpenPGP subkey of mine on Linux (L)Ubuntu 16.04 in GnuPG. It's a kind of "blank" useless key (see below key 33333333). I have not uploaded it to key servers, so I think it's ...
aldaron's user avatar
  • 503