Questions tagged [gpg]
GNU Privacy Guard (GnuPG or GPG) is OpenPGP compliant FOSS alternative to PGP encryption software.
165
questions
1
vote
0
answers
136
views
Yubikey won't receive an imported SSH auth key
I had a SSH key which I imported without problems in my GPG keyring as auth key using pem2openpgp from monkeysphere.
The imported key works fine.
I removed its SSH version from ~/.ssh and switched ...
- 145
0
votes
0
answers
407
views
gpg-mailgate removes content of e-mails
I have installed gpg-mailgate from this repository on my server as stated in the INSTALL file.
It does seem to work, partially. As it would be expected, when sending an e-mail to an account on my ...
- 1
3
votes
1
answer
6k
views
How to restore a Duplicity backup to a new host?
Had a catastrophic failure on a RAID array and lost everything.
Have a full set of backups on S3 via duplicity (2003 files), encrypted with GPG.
I have the passphrase and a copy of the private key ...
CommunityBot
- 1
2
votes
1
answer
5k
views
gpg: no valid OpenPGP data found [closed]
I am trying to make sense of the following two serverfault posts:
How to verify a file using an asc signature file?
and
gpg --import bind-9.9.4.tar.gz.sha1.asc fails with no valid OpenPGP data ...
- 198
0
votes
0
answers
365
views
Fix or explain tty issue and gpg2
I'm having an issue importing or generating gpg secret keys on ubuntu 18.04 with my main (sudo) non-root user. With root user I have no problems with gpg, but non-root and it's basically permission ...
- 101
1
vote
1
answer
1k
views
How to lock / unlock a gpg hardware token via script
I would like to execute gpg --card-edit; verify; quit non-interactively to unlock a gpg hardware token (i.e. smartcard or yubikey).
My usecase is:
Enter a password e.g. via ssh
Store it in the ...
- 633
1
vote
1
answer
4k
views
Problematic apt-get update due to missing gpg keys
I accidentally deleted some Debian gpg keys when testing out apt-key del. (I don't remember which key)
I have redownloaded the deb package and extracted the gpg keys. Then I used apt-key add to add ...
- 223
4
votes
1
answer
10k
views
gpg-agent: fatal error in syslog on ssh login
In the syslog for my Ubuntu server, there is an error that appears whenever I log in using an SSH user account.
systemd[27299]: usr/bin/gpg-agent failed (exitcode=2): General error
systemd[27299]: ...
- 365
8
votes
1
answer
12k
views
Unable to generate GPG keys without passphrase on Ubuntu 18.04 [closed]
Has anyone tried creating GPG keys for encrypted pillars on Ubuntu 18.04?
I'm using the following command to attempt to generate the keys:
gpg --gen-key --homedir /etc/salt/gpgkeys
When I run that ...
- 3,469
5
votes
2
answers
2k
views
Why do I get this APT warning: Signature by key [...] uses weak digest algorithm (SHA1)?
I'm hosting a private Debian repository for some custom Raspberry Pi code. I originally built the software on Raspbian Jessie (version 8), generated a GPG key which I use to sign the repository, and ...
- 161
5
votes
1
answer
2k
views
force ssh to use agent, without fallback to directly accessing the IdentityFile
Company policy requires some ssh keys to be stored securely, e.g. on dedicated USB device. Using keys not stored on the host machine works flawlessly using gnupg with enable-ssh-support, even when ...
- 9,783
8
votes
3
answers
4k
views
Force the use of a gpg-key as an ssh-key for a given server
I configured ssh to use GPG as my ssh-agent and if I remove the ~/.ssh folder, I can ssh into my server fine using my gpg key. However, my ~/.ssh folder has over a dozen different ssh keys in it, and ...
- 9,783
1
vote
1
answer
1k
views
Where does duplicity store the key that it creates?
I started a backup via duplicity without giving it any options. I haven't created any GPG keys myself, so when I ran duplicity, it asked me for a passphrase, then created a key, and successfully ...
- 18
2
votes
1
answer
502
views
What is the Devuan equivalent of the Debian debian-archive-keyring package?
Debian keeps the keys required for a successful multistrap installation in a package called debian-archive-keyring.
(Multistrap is like debootstrap, but it can install packages from multiple ...
- 2,118
4
votes
1
answer
2k
views
How do I successfully import public key 94532124541922FB into GPG?
I think I need to have the key 94532124541922FB in my keyring as multistrap is reporting:
W: GPG error: http://packages.roundr.devuan.org/merged ascii InRelease: The following signatures couldn't be ...
- 2,118
2
votes
1
answer
1k
views
How to get only the pub part of gpg --list-public-keys?
Okay, there is probably a better way to phrase this question. I am writing a script to configure my web servers on the first boot, but I hit a snag when generating the GPG key that will be used to ...
- 883
21
votes
3
answers
16k
views
How to prevent gpg from creating .gnupg directory in user's home directory
I'm trying to run use the gpg tool to encrypt and decrypt files and I would like to know if it's possible to run this tool without it changing a user's global state. Specifically, running gpg for the ...
- 21
1
vote
1
answer
765
views
How to export GPG key without user interaction?
I use GPG keys to encrypt backups with duplicity, so I would like to export the key after it is generated, so I can move it to a backup location in case the server burst into flames.
Is there any way ...
- 33.3k
0
votes
1
answer
919
views
Aptly publish asking for password although --passphrase flag is set
I unsuccessfully try publishing an APTLY snapshot (about 80GB) using
aptly publish snapshot --batch=true --passphrase="SuperSecretPassWord" --distribution="mydistro" current-snapshot
After about 15 ...
- 1,058
0
votes
0
answers
274
views
Where is the networker public key?
I am trying to install a networker backup client on linux (CentOS).
At the moment I have to use "yum install --nogpgcheck" to do this, since I could not find the public gpg-key for their rpms.
...
- 7,745
0
votes
1
answer
349
views
rhel7 yum repository metadata GPG signatures
I'm trying to sign yum repo metadata using GPG, as part of a Jenkins job. This is proving more difficult than I first imagined, but I'm sure lots of people must have done this already.
I've worked ...
- 248k
1
vote
1
answer
398
views
Have Duplicity use user's persistent gpg session when performing full filesystem backup?
I'm trying to set up automatic, full filesystem backups on my local system using Duplicity. I do not want to have to enter my password for it to encrypt a volume: what if I am not at the computer and ...
- 334
5
votes
1
answer
6k
views
How to reposync saltstack? reposync failing with error message `Removing [...], due to missing GPG key.`
On a RHEL 7.4 system, I add the salt-latest repo as follows:
yum -y install https://repo.saltstack.com/yum/redhat/salt-repo-latest-2.el7.noarch.rpm
Notice, amongst other things, this creates the ...
2
votes
1
answer
2k
views
Duplicity restore reports "Invalid SSH password" when I'm using a private key for connection
I'm testing the restoration of a backup with duplicity 0.6.15.
I can login to my backup server just fine using ssh and sftp using the following commands and my private key:
...sftp
root@client:~# ...
CommunityBot
- 1
2
votes
1
answer
2k
views
How to setup logrotate with GPG to encrypt for GDPR?
As per GDPR all private data should be encrypted, so I need to encrypt all logs and retrieve them for auditing. I have chosen to perform the encryption during log rotation and to use GnuPG as my ...
- 49.8k
4
votes
1
answer
4k
views
gnupg ELG vs ELG-E
We recently upgraded the server we use to gpg encrypt files with public key encryption.
Old server had gnupg version 1.2.6.
On the new server, gnupg version 2.0.18, we imported our gpg keyring from ...
CommunityBot
- 1
15
votes
2
answers
27k
views
How to remove a yum repo GPG key?
I have a custom RPM repo in Artifactory, and GPG signing keys were recently enabled.
When I ran sudo yum check-updates I was prompted to add the key:
Retrieving key from https://artifactory.example....
- 425
1
vote
1
answer
899
views
Querying SKS (PGP key server) database directly?
I have an SKS server set up on Ubuntu 16, currently with a manifest of keys from dumps provided by the MIT PGP key server. I'd like to be able extract public keys / subkeys and associated user info (...
- 1,613
0
votes
1
answer
914
views
How can I host my public GPG key on S3?
I've been packaging some proprietary software that runs on Raspbian into .deb files and hosting them in a private S3 bucket using a program called deb-s3. I also use a program called apt-transport-s3 ...
- 33.3k
17
votes
2
answers
9k
views
Reprepro export could not find signing key
We have a private debian repository that was set up years ago by an earlier system admin. Packages were signed by the older key, 7610DDDE (which I had to revoke), as shown here for the root user on ...
- 131
1
vote
1
answer
2k
views
mongodb 10gen repo invalid signature
I am trying to install mongodb on debian from 10gen repo. I have followed the official guide HERE however i am stuck when trying to add the repo in apt.
The problem is that the signature is invalid. ...
- 1,290
5
votes
1
answer
23k
views
How to export private key? (GnuPG) [closed]
I have successfully created GnuPG public/private key pair using RSA and RSA algorithm. How can I export a public key and private key in the form of file with the .asc extension?
- 4,970
2
votes
1
answer
4k
views
Bad RPM Signatures
I'm trying to set up a repo that contains both CentOS 6.4 and 5.9 packages. The machine itself is 6.4.
I've created a GPG key and have been able to sign my 6.4 packages no problem. When I create them ...
- 103
2
votes
3
answers
1k
views
Encrypt backups with GPG to multiple tapes
Currently, I use tar to write my backups (ntbackup files) to a tape drive fed by an autoloader.
Ex:
tar -F /root/advancetape -cvf /dev/st0 *.bkf
(/root/advancetape just has the logic to advance to ...
- 1,145
12
votes
4
answers
22k
views
gpg-agent says agent exists, but gpg says agent doesn't exist?
I'm struggling with some issues while scripting gpg with bash on a Debian 6.0.6 box. I have a script that does a batch of operations and wants to make sure that a gpg-agent is available before it ...
- 195
2
votes
1
answer
2k
views
GPG signed aptly repository not working as expected
We host some of our own software packages as debs in a repository of our own. For prototyping purposes, we’ve been running “unauthenticated”. Now we're trying to do things more correctly and do the ...
- 1
6
votes
3
answers
10k
views
GPG doesn't work in crontab
I have the following script:
#!/bin/sh -e
PWD="supersecretpassword"
file="/backup/2do/example.txt"
echo before
echo $PWD | gpg --passphrase-fd 0 -c $file
echo after
The scripts works perfectly fine ...
- 3,819
1
vote
0
answers
320
views
How to auto update the expired GPG keys of APT?
When you create your own APT repo, you have to create a GPG key for it.
So you need to import it with:
apt-key add yourkey.asc
or with a key server:
apt-key adv --keyserver keyserver.ubuntu.com --...
- 358
1
vote
2
answers
512
views
The generation method of the random number at the time of the key pair making in gpg
in gpg --key-gen
following error occured.
Not enough random bytes available.
Please do some other work to give the OS a chance to collect more
entropy!
(Need 300 more bytes)
What's wrong?
- 111
2
votes
1
answer
747
views
Signing debian repository: Avoided SHA1, apt-get update still complaining about weak digest
I maintain a small debian repository for my employer, and we have been facing issues lately due to the SHA1 deprecation.
We sign our packages with a 4096bit RSA key. For signing the repository, I ...
- 133
0
votes
1
answer
527
views
How to share or encrypt sensitive git repos
My organization is using Openshift for running several applications. Our policy thus far has been to always store sensitive values (DB passwords, API keys, etc) in environment variables and never as ...
- 110k
1
vote
1
answer
2k
views
Sync Ubuntu repository with Cobbler server fails
I am trying to sync the Ubuntu trusty repo to my cobbler server. The issue is that for some reason the connection seems unstable during the parts that work.. additionally it fails to proceed with one ...
12
votes
3
answers
4k
views
Encrypted offsite backup using GPG with private key never on backup server?
I have a backup server, that creates xz compressed tar archives of directory trees to be backed up. These tar archives can get huge (multiple TBs), are split into pieces (2.5TB), and each piece is ...
CommunityBot
- 1
0
votes
1
answer
413
views
Where and how properly keep my private and public gpg keys?
What's the proper way to keep safe and backup my private and public gpg keys? Can I keep them both in the same place on a flash usb stick, is there any security about that? Or should I necessarily ...
- 8,078
5
votes
1
answer
2k
views
How can I set up automated, encrypted backups of live MySQL databases on a Ubuntu VPS to Google Drive using Duplicity?
We're using DigitalOcean as our VPS provider. They have a tutorial on how to set up Duplicity for encrypted backups, but it doesn't cover database backups or the Google Drive endpoint.
I found a few ...
CommunityBot
- 1
1
vote
1
answer
980
views
how to trigger gpg agent refresh password?
We use StackExchange blackbox as well as Hiera-eyaml-gpg to encrypt files in our Git repo using GPG keys.
I configured Git to decrypt files using Textconv configuration, so it automatically decrypts ...
- 859
1
vote
1
answer
4k
views
Apache doesn't want to load GnuPG PHP
I've asked this in SO but maybe here is more suitable to ask.
I'm installed GnuPG via Pecl. Generate pub/priv keys etc.. I have in php.ini
extension=gnupg.so
When I try to run simple code I've got ...
- 4,786
0
votes
0
answers
74
views
Trying to load posted public key from http://pgp.mit.edu:11371/ after loading it there
So, I run pgp --dry-run --import test.asc on the public key I gave to the site and then I look it up with that key that it gives back and it says not found.
How to do this properly such that I can ...
- 931
4
votes
2
answers
5k
views
Duplicity - how to put passphrase in command?
I've tried a number of obvious commands as detailed in Duplicity Man page to do this but it doesn't seem to work.
Scenario
I'm SSH'ing to a machine, then running Duplicity; below is the command, of ...
- 213
1
vote
1
answer
8k
views
how to use GPG to decrypt multiple files to a different directory
I am trying to decrypt multiple files to a different directory keeping the existing filenames. When i run the below syntax it seems to decrypt them ok but it only ouputs to the screen. I would like to ...
CommunityBot
- 1