GNU Privacy Guard (GnuPG or GPG) is OpenPGP compliant FOSS alternative to PGP encryption software.

learn more… | top users | synonyms

33
votes
5answers
25k views

gpg not enough entropy!

SO I've got a ton of processes running in the background to try and get enough entropy but I am still failing. **We need to generate a lot of random bytes. It is a good idea to perform some other ...
15
votes
4answers
6k views

Using PGP keys for SSH

I use a 4096 byte RSA PGP key; since SSH also uses the RSA standard, is it at all possible to use the PGP key as an SSH key without installing additional software on the server (and as little as ...
14
votes
4answers
11k views

gpg --gen-key hangs at gaining enough entropy on centos 6

Trying to generate a key for a server. gpg --gen-key We need to generate a lot of random bytes. It is a good idea to perform some other action (type on the keyboard, move the mouse, utilize ...
12
votes
2answers
6k views

GPG - why am I encrypting with subkey instead of primary key?

When encrypting a file to send to a collaborator, I see this message: gpg: using subkey XXXX instead of primary key YYYY Why would that be? I've noticed that when they send me an encrypted file, ...
11
votes
4answers
5k views

Validating signature trust with gpg?

We would like to use gpg signatures to verify some aspects of our system configuration management tools. Additionally, we would like to use a "trust" model where individual sysadmin keys are signed ...
10
votes
5answers
27k views

Why does apt-get update tell me to run apt-get update?

So I have this going on: # apt-get update Get:1 http://ftp.us.debian.org etch Release.gpg [1032B] Hit http://ftp.us.debian.org etch Release ...
10
votes
2answers
3k views

How does changing a GPG encryption key's passphrase work?

I know that I can do (edit: fixed this; I'm interested in gpg NOT openssh) gpg --edit-key ...to change my passphrase for my key, but I'm not sure what this means. If I'm encrypting data on box A ...
8
votes
4answers
3k views

gpg: what do I need to backup?

What are the critical files I need to backup from gpg? I guess my private key would qualify of course... but what else?
7
votes
3answers
4k views

Debian - “WARNING: untrusted versions of the following packages will be installed!”

When i try to install or update any packages I get: Untrusted packages could compromise your system's security. You should only proceed with the installation if you are certain that this is what you ...
6
votes
2answers
148 views

Encrypted offsite backup using GPG with private key never on backup server?

I have a backup server, that creates xz compressed tar archives of directory trees to be backed up. These tar archives can get huge (multiple TBs), are split into pieces (2.5TB), and each piece is ...
6
votes
1answer
3k views

How do I import a RSA SSH key into GPG as the _primary_ private key?

I currently have a SSH key that I've used for a while and I'd like to start using GnuPG with a new keyring. However, given that I've used my key for ages, I would like to still use that key in GPG as ...
6
votes
3answers
220 views

General GnuPG tips

Prompted by the recent vulnerability in SHA-1 and admonitions to begin the process of moving away from that hash function, I'm playing around with GnuPG again. I was just wondering how other folks ...
6
votes
1answer
498 views

Mailing list + PGP/GPG support

I would like to create such mailing list where every contributor must sign his/her messages with PGP/GPG, otherwise mailing list software would block unsigned message. All PGP/GPG public keys of ...
6
votes
1answer
2k views

Using gpg-agent over ssh

I'm having a problem using the gpg-agent over ssh via a single command line. Here is my configuration : Server A : triggering the command via ssh. ssh user@serverB "sudo -E /path/to/script.sh" ...
5
votes
3answers
269 views

PGP: on the web, what if everything was tampered?

I am trying to wrap my head around how Public Key Cryptography can really work in a secure manner. From what I can gather, you go to example.com and download their PGP/GPG Public Key and add it to ...
5
votes
3answers
305 views

GPG/PGP Signatures & Encryption - An Academic Security Question

Digital Signatures Digital signatures take place whereby you apply your private key to a particular message (or the hash of that message in most cases). The recipient then takes your public key - ...
5
votes
3answers
6k views

gpg-agent says agent exists, but gpg says agent doesn't exist?

I'm struggling with some issues while scripting gpg with bash on a Debian 6.0.6 box. I have a script that does a batch of operations and wants to make sure that a gpg-agent is available before it ...
5
votes
2answers
719 views

Is it possible to use a gpg public key to encrypt a message without importing the key?

Sometimes I might want to use someone's gpg key to send a message but will have no need to ever use the key again. Importing the key in this instance seems unnecessary. I've searched, but can't find ...
5
votes
1answer
3k views

How can I decrypt multiple files in a directory with gpg?

I have a directory with multiple .gpg files, all encrypted with the same passphrase. How can I decrypt them all without entering the passphrase over and over?
4
votes
5answers
3k views

user GPG key not able to be used by SUDO

I created a script that runs duplicity to backup files I have on a VPS,and uses a GPG key that I generated as a user. When I try and run this script as SUDO I get: GPGError: GPG Failed, see log ...
4
votes
1answer
5k views

Bad signatures or NOKEY errors on RPMs I just signed

I'm having serious problems getting RPM signing working for RHEL / CentOS 5 hosts. TL;DR: RPM signing isn't working, and it's working in a variety of insane and erratic ways depending on the exact ...
4
votes
1answer
151 views

Reprepro export could not find signing key

We have a private debian repository that was set up years ago by an earlier system admin. Packages were signed by the older key, 7610DDDE (which I had to revoke), as shown here for the root user on ...
4
votes
1answer
2k views

Cannot update Debian Wheezy due to GPG error (NODATA)

I have a server running on Debian Wheezy. It's apt source file has following configuration: deb http://ftp.uk.debian.org/debian/ wheezy main non-free contrib deb-src http://ftp.uk.debian.org/debian/ ...
4
votes
1answer
338 views

How to prevent gpg from creating .gnupg directory in user's home directory

I'm trying to run use the gpg tool to encrypt and decrypt files and I would like to know if it's possible to run this tool without it changing a user's global state. Specifically, running gpg for the ...
4
votes
2answers
1k views

How to generate gpg key without user interaction?

I found in https://www.gnupg.org/documentation/manuals/gnupg/Unattended-GPG-key-generation.html#Unattended-GPG-key-generation method to generate gpg keys without user interaction, but it doesn't seem ...
4
votes
1answer
629 views

GPG Encryption: Am I using the right keys?

I have a process to encrypt a bank file using OpenPGP (via BouncyCastle) and SFTP the file to the bank for financial processing. They sent me a public key file, which I examined the key using the ...
3
votes
2answers
1k views

Validating GPG key signature authenticity

I'm trying to validate the integrity of my httpd-2.2.17.tar.gz image. I followed the steps written in the following pages: http://httpd.apache.org/download.cgi#verify http://httpd.apache.org/dev/...
3
votes
2answers
1k views

How to verify an imported GPG key

I'm new to this PGP thing. Here are my questions: Verification When I do this, I'm given the message "This key is not certified with a trusted signature". Is there anyway to make it trusted and ...
3
votes
2answers
1k views

GPG encrypt and decrypt with ssh-agent

I use ssh regularly and have ssh-agent set up. How can I use ssh keys to gpg-encrypt a file? Edit: It seems that this is impossible. Why? ssh can encrypt traffic, so why not also files?
3
votes
2answers
3k views

How can I use Duplicity with a symmetric key?

I am using duplicity to perform backups on my server. Right now duplicity is encrypting the backup using a GPG public-private key system. I would prefer to encrypt the backup files using just a ...
3
votes
2answers
2k views

GPG doesn't work in crontab

I have the following script: #!/bin/sh -e PWD="supersecretpassword" file="/backup/2do/example.txt" echo before echo $PWD | gpg --passphrase-fd 0 -c $file echo after The scripts works perfectly fine ...
3
votes
1answer
914 views

How do you enable the storing of GPG / PGP keys in OpenLDAP

I've searched high and low trying to find a method that allows me to store GPG keys for existing users in an OpenLDAP server. The only relevant how-to I've found is this. However, I'm unable to get ...
3
votes
1answer
39 views

Is is still necessary to export the trustdb file?

I'm reading up on these instructions for backing up gpg keys: https://gist.github.com/chrisroos/1205934 He says that in the gpg instructions it says that it's better to export trustdb and simply ...
3
votes
1answer
1k views

Encrypting all incoming mail with public pgp key per user

What I'm trying to do is be able to take all incoming messages and encrypt them with that users public pgp key. I'm running postfix + courier etc. http://flurdy.com/docs/postfix/ I've read through ...
3
votes
0answers
66 views

Anubis as GPG proxy

I'm trying to setup GNU Anubis to act as a sort of proxy to sign/encrypt emails coming from a service. The service is currently configured to send email using our SMTP server. The idea would be to ...
3
votes
1answer
64 views

Should the GPG key of a debian repository be shared among its maintainers?

I'm following this tutorial to set up a debian repository https://wiki.debian.org/SettingUpSignedAptRepositoryWithReprepro This repository will be managed by me and my colleagues. We want to sign ...
2
votes
9answers
2k views

Output/pipe ntbackup directly to GPG

Currently, we can perform and encrypt a Windows backup with ntbackup and GPG in 2 separate steps in a batch script, as below: ntbackup backup "@selection_file.bks" /f "backup_file.bak" gpg --...
2
votes
1answer
2k views

gpg key and what is it for? GPG key retrieval failed error

What is a gpg key and why do i need it? I get this nagging error when i install a fresh centos vps machine: GPG key retrieval failed: [Errno 5] OSError: [Errno 2] No such file or directory: '/etc/...
2
votes
1answer
516 views

PGP Encryption Proxy for Mail Server [closed]

I have a friend who is located in a part of the world that makes email encryption prudent for them. While I recommended OpenPGP, my friend thinks that it would have too high of a setup requirement for ...
2
votes
1answer
585 views

replace or remove GPG signature on RPM

Is there a way to remove or replace an existing GPG signature on an RPM? I am placing a few obscure RPMs on an internal repo we use for supplementary rhel/centos packages. A few of those RPMs are ...
2
votes
2answers
889 views

what are the minimal user permissions required to scp files to a remote server?

I want to setup a cron job to transfer data from one host (A) to another (B). My understanding so far is that I will have to create a user on machine B, so that scp can copy the files to a folder in ...
2
votes
1answer
1k views

gnupg 'libgpg-error.so.0 no version information available'

I'm trying to compile gnupg-2.1.0 for Debian Wheezy, I've downloaded and compiled the required libraries (libgpg-error-1.17, libgcrypt-1.6.2, libksba-1.3.2, libassuan-2.1.3, and pth-2.0.7 in that ...
2
votes
1answer
2k views

How to Disable GPG checks per Channel in Spacewalk?

Is it possible to disable GPG checks on a per channel basis in Spacewalk? For patching of my servers, I've converted from using local yum repositories on the clients under /etc/yum.repos.d, to ...
2
votes
2answers
1k views

Different results from GnuPG and OpenSSL when using AES256 encryption

Text: apple Pass: password openssl aes-256-cbc -e -a -in apple.txt Output: U2FsdGVkX1/sqDrVkgk/7dKiCfLW+1/bgvRT/YAopJQ= gpg -c --cipher-algo AES256 apple.txt Output: ...
2
votes
2answers
104 views

Allowing multiple users to decrypt pgp emails for one email-address

me and my business partner each have our own company email address for which we use PGP. This allows us to communicate safely with our customers. However in order to communicate securely, the sender ...
2
votes
1answer
1k views

dget complains that public key not found

I'm trying to backport a package, but dget (dscverify) says that it can't check the signature because of public key not being found: [root ~/build/openssl] dget -x http://ftp.de.debian.org/debian/...
2
votes
1answer
158 views

Are PGP Universal keys compatible with the openPGP standard?

I'm having issues importing a PGP Universal Public key on a system that supports openPGP. Are these two different standards/formats? Should they be compatible?
2
votes
1answer
1k views

Duplicity restore reports “Invalid SSH password” when I'm using a private key for connection

I'm testing the restoration of a backup with duplicity 0.6.15. I can login to my backup server just fine using ssh and sftp using the following commands and my private key: ...sftp root@client:~# ...
2
votes
1answer
356 views

Crypto key storage and recovery — best practices?

We have a bunch of SSH, GPG, SSL and other private keys that, obviously: must only be available to the smallest number of people possible can't be "lost" if a hard drive dies or the building burns ...
2
votes
0answers
47 views

SSH to linux machine with g10 smartcard on windows client

Hi it was recommended I post here after trying stackexchange. Appreciate any light you might be able to shed on my problem I am struggling to ssh to a linux machine from a windows machine using Putty ...