Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
The results are in! See what nearly 90,000 developers picked as their most loved, dreaded, and desired coding languages and more in the 2019 Developer Survey.

Questions tagged [gpg]

GNU Privacy Guard (GnuPG or GPG) is OpenPGP compliant FOSS alternative to PGP encryption software.

1
vote
1answer
45 views

Where does duplicity store the key that it creates?

I started a backup via duplicity without giving it any options. I haven't created any GPG keys myself, so when I ran duplicity, it asked me for a passphrase, then created a key, and successfully ...
0
votes
1answer
20 views

What is the Devuan equivalent of the Debian debian-archive-keyring package?

Debian keeps the keys required for a successful multistrap installation in a package called debian-archive-keyring. (Multistrap is like debootstrap, but it can install packages from multiple ...
2
votes
1answer
38 views

How do I successfully import public key 94532124541922FB into GPG?

I think I need to have the key 94532124541922FB in my keyring as multistrap is reporting: W: GPG error: http://packages.roundr.devuan.org/merged ascii InRelease: The following signatures couldn't be ...
0
votes
0answers
42 views

Multiple files encrypted with multiple GPG keys - how to easily add/remove/manage keys, automate key change tasks?

We have a bunch of files that contain sensitive information, that need to be accessed by several teams, but need to be unreadable to everyone else. Currently, each team member needs to generate their ...
1
vote
1answer
54 views

How to export GPG key without user interaction?

I use GPG keys to encrypt backups with duplicity, so I would like to export the key after it is generated, so I can move it to a backup location in case the server burst into flames. Is there any way ...
1
vote
1answer
39 views

How to get only the pub part of gpg --list-public-keys?

Okay, there is probably a better way to phrase this question. I am writing a script to configure my web servers on the first boot, but I hit a snag when generating the GPG key that will be used to ...
0
votes
1answer
828 views

Problematic apt-get update due to missing gpg keys

I accidentally deleted some Debian gpg keys when testing out apt-key del. (I don't remember which key) I have redownloaded the deb package and extracted the gpg keys. Then I used apt-key add to add ...
0
votes
1answer
59 views

Aptly publish asking for password although --passphrase flag is set

I unsuccessfully try publishing an APTLY snapshot (about 80GB) using aptly publish snapshot --batch=true --passphrase="SuperSecretPassWord" --distribution="mydistro" current-snapshot After about 15 ...
0
votes
0answers
90 views

Where is the networker public key?

I am trying to install a networker backup client on linux (CentOS). At the moment I have to use "yum install --nogpgcheck" to do this, since I could not find the public gpg-key for their rpms. ...
0
votes
1answer
57 views

rhel7 yum repository metadata GPG signatures

I'm trying to sign yum repo metadata using GPG, as part of a Jenkins job. This is proving more difficult than I first imagined, but I'm sure lots of people must have done this already. I've worked ...
0
votes
1answer
62 views

Have Duplicity use user's persistent gpg session when performing full filesystem backup?

I'm trying to set up automatic, full filesystem backups on my local system using Duplicity. I do not want to have to enter my password for it to encrypt a volume: what if I am not at the computer and ...
0
votes
1answer
481 views

How to reposync saltstack? reposync failing with error message `Removing […], due to missing GPG key.`

On a RHEL 7.4 system, I add the salt-latest repo as follows: yum -y install https://repo.saltstack.com/yum/redhat/salt-repo-latest-2.el7.noarch.rpm Notice, amongst other things, this creates the ...
1
vote
1answer
752 views

How to setup logrotate with GPG to encrypt for GDPR?

As per GDPR all private data should be encrypted, so I need to encrypt all logs and retrieve them for auditing. I have chosen to perform the encryption during log rotation and to use GnuPG as my ...
1
vote
2answers
272 views

Force the use of a gpg-key as an ssh-key for a given server

I configured ssh to use GPG as my ssh-agent and if I remove the ~/.ssh folder, I can ssh into my server fine using my gpg key. However, my ~/.ssh folder has over a dozen different ssh keys in it, and ...
2
votes
2answers
2k views

How to remove a yum repo GPG key?

I have a custom RPM repo in Artifactory, and GPG signing keys were recently enabled. When I ran sudo yum check-updates I was prompted to add the key: Retrieving key from https://artifactory.example....
4
votes
1answer
6k views

How to verify a file using an asc signature file?

As an example, this project offers an *.asc file with a PGP signature to verify the contents of the download (as opposed to a checksum, you can see the empty column): https://ossec.github.io/downloads....
1
vote
0answers
783 views

Export Private ed25519 Key From GnuPG For Use in SSH

Is there a way to create an id_ed25519 (not id_ed25519.pub) file from an ed25519 keypair stored in GnuPG? I've started keeping track of my SSH keys in GPG: sec rsa3072 2017-12-12 [C] ...
1
vote
1answer
394 views

Querying SKS (PGP key server) database directly?

I have an SKS server set up on Ubuntu 16, currently with a manifest of keys from dumps provided by the MIT PGP key server. I'd like to be able extract public keys / subkeys and associated user info (...
3
votes
1answer
724 views

Why do I get this APT warning: Signature by key […] uses weak digest algorithm (SHA1)?

I'm hosting a private Debian repository for some custom Raspberry Pi code. I originally built the software on Raspbian Jessie (version 8), generated a GPG key which I use to sign the repository, and ...
0
votes
1answer
290 views

How can I host my public GPG key on S3?

I've been packaging some proprietary software that runs on Raspbian into .deb files and hosting them in a private S3 bucket using a program called deb-s3. I also use a program called apt-transport-s3 ...
1
vote
1answer
1k views

mongodb 10gen repo invalid signature

I am trying to install mongodb on debian from 10gen repo. I have followed the official guide HERE however i am stuck when trying to add the repo in apt. The problem is that the signature is invalid. ...
2
votes
0answers
119 views

How to auto update the expired GPG keys of APT?

When you create your own APT repo, you have to create a GPG key for it. So you need to import it with: apt-key add yourkey.asc or with a key server: apt-key adv --keyserver keyserver.ubuntu.com --...
1
vote
1answer
1k views

GPG signed aptly repository not working as expected

We host some of our own software packages as debs in a repository of our own. For prototyping purposes, we’ve been running “unauthenticated”. Now we're trying to do things more correctly and do the ...
1
vote
1answer
1k views

How to restore a Duplicity backup to a new host?

Had a catastrophic failure on a RAID array and lost everything. Have a full set of backups on S3 via duplicity (2003 files), encrypted with GPG. I have the passphrase and a copy of the private key ...
0
votes
1answer
364 views

How to share or encrypt sensitive git repos

My organization is using Openshift for running several applications. Our policy thus far has been to always store sensitive values (DB passwords, API keys, etc) in environment variables and never as ...
3
votes
1answer
487 views

Signing debian repository: Avoided SHA1, apt-get update still complaining about weak digest

I maintain a small debian repository for my employer, and we have been facing issues lately due to the SHA1 deprecation. We sign our packages with a 4096bit RSA key. For signing the repository, I ...
3
votes
2answers
324 views

Add second sub-key to unattended GPG key

I am writing a bash script which generates unattended GPG keys, I have looked through Unattended Usage of GPG and was surprised to find that 'Currently only one subkey can be handled.' I am unable to ...
0
votes
1answer
192 views

Where and how properly keep my private and public gpg keys?

What's the proper way to keep safe and backup my private and public gpg keys? Can I keep them both in the same place on a flash usb stick, is there any security about that? Or should I necessarily ...
3
votes
1answer
1k views

How can I set up automated, encrypted backups of live MySQL databases on a Ubuntu VPS to Google Drive using Duplicity?

We're using DigitalOcean as our VPS provider. They have a tutorial on how to set up Duplicity for encrypted backups, but it doesn't cover database backups or the Google Drive endpoint. I found a few ...
1
vote
1answer
2k views

Apache doesn't want to load GnuPG PHP

I've asked this in SO but maybe here is more suitable to ask. I'm installed GnuPG via Pecl. Generate pub/priv keys etc.. I have in php.ini extension=gnupg.so When I try to run simple code I've got ...
1
vote
1answer
492 views

how to trigger gpg agent refresh password?

We use StackExchange blackbox as well as Hiera-eyaml-gpg to encrypt files in our Git repo using GPG keys. I configured Git to decrypt files using Textconv configuration, so it automatically decrypts ...
0
votes
0answers
47 views

Trying to load posted public key from http://pgp.mit.edu:11371/ after loading it there

So, I run pgp --dry-run --import test.asc on the public key I gave to the site and then I look it up with that key that it gives back and it says not found. How to do this properly such that I can ...
5
votes
1answer
17k views

How to export private key? (GnuPG) [closed]

I have successfully created GnuPG public/private key pair using RSA and RSA algorithm. How can I export a public key and private key in the form of file with the .asc extension?
0
votes
2answers
4k views

how do I covert a certificate with extension .cer to .asc

I have a certificate file (with extension .cer) that has content which looks something like this. -----BEGIN CERTIFICATE----- lots of data here -----END CERTIFICATE----- It is our signing ...
3
votes
1answer
480 views

Is is still necessary to export the trustdb file?

I'm reading up on these instructions for backing up gpg keys: https://gist.github.com/chrisroos/1205934 He says that in the gpg instructions it says that it's better to export trustdb and simply ...
1
vote
2answers
2k views

EPEL Repo GPG Key Working?

I followed the below steps to grab the EPEL GPG key and I'm trying to verify if it's working. This is on a freshly installed RHEL7 system. Repo: https://dl.fedoraproject.org/pub/epel/7/x86_64/ # cd /...
13
votes
2answers
5k views

Reprepro export could not find signing key

We have a private debian repository that was set up years ago by an earlier system admin. Packages were signed by the older key, 7610DDDE (which I had to revoke), as shown here for the root user on ...
0
votes
1answer
237 views

RHEL6 and GPG 2.0.14: What is a working keyserver config with proxy?

The documented solution doesn't seem to actually work. The documented solution: In ~/.gnupg/gpg.conf change to use an HTTP keyserver and honor the environment variable http_proxy. The proxy I'm using ...
10
votes
3answers
2k views

Encrypted offsite backup using GPG with private key never on backup server?

I have a backup server, that creates xz compressed tar archives of directory trees to be backed up. These tar archives can get huge (multiple TBs), are split into pieces (2.5TB), and each piece is ...
0
votes
2answers
1k views

GPG Key not available for Local Apt Repo

We have an Apt-mirror server. We have also a custom repo named 'local' on this server. If I add in sources.list the following line : deb http://aptmirror.example.com/local trusty main The ...
2
votes
2answers
504 views

Allowing multiple users to decrypt pgp emails for one email-address

me and my business partner each have our own company email address for which we use PGP. This allows us to communicate safely with our customers. However in order to communicate securely, the sender ...
-1
votes
1answer
74 views

File encryption when limited in storage

Assume: On Linux server we have limited free space. The task is to create archive of a folder (for example /var/www), encrypt it and upload to remote location keeping original unencrypted file in ...
4
votes
1answer
7k views

Cannot update Debian Wheezy due to GPG error (NODATA)

I have a server running on Debian Wheezy. It's apt source file has following configuration: deb http://ftp.uk.debian.org/debian/ wheezy main non-free contrib deb-src http://ftp.uk.debian.org/debian/ ...
0
votes
1answer
1k views

Duplicity for remote backup to AWS S3

I am using Bacula with S3 for backups. I keep bacula volumes for 60 days or so. Using duplicity as I would like to use GPG encryption of the volumes. Is there any way to do an rsync style sync using ...
0
votes
0answers
275 views

gpg-mailgate removes content of e-mails

I have installed gpg-mailgate from this repository on my server as stated in the INSTALL file. It does seem to work, partially. As it would be expected, when sending an e-mail to an account on my ...
4
votes
0answers
207 views

Anubis as GPG proxy

I'm trying to setup GNU Anubis to act as a sort of proxy to sign/encrypt emails coming from a service. The service is currently configured to send email using our SMTP server. The idea would be to ...
0
votes
1answer
147 views

Easy way of checking signature of a source package from the other release of debian

I'm trying to backport nanomsg from jessie to squeeze. But when I run: dget http://http.debian.net/debian/pool/main/n/nanomsg/nanomsg_0.4~beta+dfsg-3.dsc It says: dscverify: nanomsg_0.4~beta+dfsg-3....
5
votes
2answers
4k views

Is it possible to use a gpg public key to encrypt a message without importing the key?

Sometimes I might want to use someone's gpg key to send a message but will have no need to ever use the key again. Importing the key in this instance seems unnecessary. I've searched, but can't find ...
1
vote
0answers
187 views

gpg --receive-keys times out but Wireshark confirms the http response is received

I'm using a virtual machine running Ubuntu 14.04, trying to use apt-keys to add keys for nginx. Most of this is automatic via puppet but I'm going through the process manually to find where the fault ...
1
vote
0answers
961 views

GnuPG complaining I don't have a secret key but I do

I am migrating machines I use for my backups. It uses GnuPG to encrypt/decrypt files. I moved my keys trying two different methods: exporting and copying the ~/.gnupg folder. Both methods seem to ...