Questions tagged [pgp]

Pretty Good Privacy (PGP)

Filter by
Sorted by
Tagged with
0
votes
2answers
27 views

Generate fingerprint with PGP Public Key

I have a PGP public key and I need to get the fingerprint for it. My Public key is as such: -----BEGIN PGP PUBLIC KEY BLOCK----- mQlDBF4w............................ . . . =uYgH -----END PGP PUBLIC ...
1
vote
1answer
42 views

Is it possible that apache will verify signed php files before using it

I will for better security configure apache to verify php scripts, which should be signed with my key. Is it possible? And is it possible not to serve not signed files?
1
vote
0answers
50 views

GPG4Win Decrypt Multiple files to a Different Directory

I have a requirement to download PGP files from a 3rd Party SFTP server and then decrypt them and move to a the company file server. I am going to use WinSCP to download the files to an Inbound ...
0
votes
0answers
53 views

Git Commit workflow that only commit when GPG is GPG signed from specific 3rd party

Here my scenario. Is there a way so that when you git commit, it will only commit into the branch if the GPG key used as been GPG signed by a specific person or organization or 3rd party. What I'm ...
1
vote
1answer
149 views

How to drop keys from internal sks keyserver

How do I drop keys from an internal SKS keyserver. SKS fingerprints are in SHA1, but sks drop command is looking for an md5, how do I properly get the MD5 fingerprint from a key on an sks keyserver. ...
0
votes
0answers
127 views

Multiple files encrypted with multiple GPG keys - how to easily add/remove/manage keys, automate key change tasks?

We have a bunch of files that contain sensitive information, that need to be accessed by several teams, but need to be unreadable to everyone else. Currently, each team member needs to generate their ...
5
votes
3answers
2k views

Force the use of a gpg-key as an ssh-key for a given server

I configured ssh to use GPG as my ssh-agent and if I remove the ~/.ssh folder, I can ssh into my server fine using my gpg key. However, my ~/.ssh folder has over a dozen different ssh keys in it, and ...
26
votes
2answers
30k views

How to verify a file using an asc signature file?

As an example, this project offers an *.asc file with a PGP signature to verify the contents of the download (as opposed to a checksum, you can see the empty column): https://ossec.github.io/downloads....
1
vote
1answer
681 views

Querying SKS (PGP key server) database directly?

I have an SKS server set up on Ubuntu 16, currently with a manifest of keys from dumps provided by the MIT PGP key server. I'd like to be able extract public keys / subkeys and associated user info (...
6
votes
3answers
69k views

apt-key add on Debian Stretch: no valid OpenPGP data found

I'm trying to follow the installation instructions for Debian provided on Docker website. Unfortunately adding a GPG key fails for me: $ curl -fsSL https://download.docker.com/linux/debian/gpg | apt-...
4
votes
1answer
2k views

Why does duplicity need a passphrase for OpenPGP encryption?

I'd like to use duplicity to backup files and I'd like to encrypt them with GnuPG. I was wondering why duplicity asks for a passphrase to encrypt the files. For asymmetric encryption the passphrase is ...
0
votes
0answers
66 views

Trying to load posted public key from http://pgp.mit.edu:11371/ after loading it there

So, I run pgp --dry-run --import test.asc on the public key I gave to the site and then I look it up with that key that it gives back and it says not found. How to do this properly such that I can ...
2
votes
3answers
4k views

Update apt gpg key over puppet

The puppet apt repository PGP key has expired some days ago /etc/apt/trusted.gpg.d//puppetlabs-keyring.gpg ---------------------------------------------- pub 4096R/4BD6EC30 2010-07-10 [expired: ...
12
votes
6answers
7k views

Generate entropy for PGP key

I'm logged onto a VM remotely and trying to generate a 4096bit PGP key, it just hangs forever because there is no entropy and since I'm working through remote desktop it probably does not detect the ...
7
votes
2answers
6k views

Is it possible to use a gpg public key to encrypt a message without importing the key?

Sometimes I might want to use someone's gpg key to send a message but will have no need to ever use the key again. Importing the key in this instance seems unnecessary. I've searched, but can't find ...
2
votes
2answers
156 views

Workstation imaging on top of full disk encryption

Is it possible to use imaging tools (e.g. Acronis Snap Deploy, or possibly SystemImager) to deploy workstation images to laptops that have PGP full disk encryption? How could I go about doing this? ...
2
votes
1answer
3k views

Store PGP keys on Active Directory/Exchange?

I am looking to implement a transparent plugin for Outlook that would need no configuration at all. I was thinking of maybe using Active Directory/Exchange to store each user's public key and be able ...
3
votes
1answer
1k views

How to securely deploy PGP in a medium-sized business?

What are the best practices for deploying PGP in a medium-sized business? The idea I had was: Setup a PGP key server that all mail clients use Create a PGP for keymaster@mycompany.com All users ...
0
votes
1answer
547 views

Where to store private key on Linux build server

On my Debian 3.2.54-2 build server I'd like to sign the build artifacts (JAR files) with my private key to ensure their authenticity. I've created a private key secring.gpg using GnuPG and protected ...
2
votes
1answer
2k views

Decrypt incoming pgp mail with procmail

Currently I have a running Postfix server which delivers incoming mail through procmail. That works fine but now I want to decrypt any incoming mail which is encrypted with pgp automatically. So I ...
2
votes
2answers
4k views

PGP decryption fails with error for one file

We store database backups encrypted with PGP Command Line 9.7.0. Files look like 2009.bak.pgp Here's command line used to backup these files: pgp --encrypt F:\2009.bak --recipient admin@company.mail ...
2
votes
2answers
499 views

How can I confirm which specific S/MIME public key was used to encrypt an email?

CentOS 5.8 Is there an easy way to tell what specific public key was used to encrypt an email? My email gateway isn't able to decrypt an inbound S/MIME message and I'm suspecting that the remote ...
-3
votes
1answer
132 views

How to view a GPG encrypted file securely? [closed]

When I decrypt / view a gpg file it is: decrypted in the terminal / console and thus gets into history the decryption goes into video memory and into normal memory and into the swap (if not ...
1
vote
2answers
91 views

Certificate Security in intranet Environment?

We have this topology in our company : A new rule says that each document being sent by outlook should be encrypted. we decided using PGP. We already have a certificate ( self signed). the ...
10
votes
1answer
6k views

Automatically sign all commits with git [closed]

With git 1.7.9, it's possible to sign a commit with the -S option. Is it possible to set it default through git config --global? So instead of git commit -S -m 'Commit message', it would be just git ...
2
votes
1answer
187 views

Are PGP Universal keys compatible with the openPGP standard?

I'm having issues importing a PGP Universal Public key on a system that supports openPGP. Are these two different standards/formats? Should they be compatible?
1
vote
1answer
361 views

Reliable PGP / GnuPG decryption for Mac OSX Mail

I'm developing a web app which emails encrypted data (from a web form) to a client who uses Macs/OSX exclusively in their office. I'd like to know: Is there are any reliable solutions for PGP / GnuPG ...
-1
votes
1answer
910 views

LAMP webmail with PGP/GPG support?

I've been asked to configure webmail for a company whose business is centred around their intellectual property - which is the rationale why we're using webmail, and not a client based email reader to ...
7
votes
1answer
841 views

Mailing list + PGP/GPG support

I would like to create such mailing list where every contributor must sign his/her messages with PGP/GPG, otherwise mailing list software would block unsigned message. All PGP/GPG public keys of ...
1
vote
2answers
162 views

Need convincing PGP public key needs to be changed

So the situation is thus. We're working with another company and as part of some file distribution processing we have to encrypt some files before they are sent. The company in question sent us ...
5
votes
3answers
328 views

PGP: on the web, what if everything was tampered?

I am trying to wrap my head around how Public Key Cryptography can really work in a secure manner. From what I can gather, you go to example.com and download their PGP/GPG Public Key and add it to ...
3
votes
3answers
729 views

Exchange Encryped Email with PGP

My organization is currently looking into encrypting our emails internally as well as the occasional message to come outside recipients. The requirements are currently a bit overwhelming and I am not ...
13
votes
4answers
8k views

Validating signature trust with gpg?

We would like to use gpg signatures to verify some aspects of our system configuration management tools. Additionally, we would like to use a "trust" model where individual sysadmin keys are signed ...
6
votes
2answers
354 views

Sending HIPAA compliant e-mails

At a small office, my clients' HR department needs to communicate with some vendors regarding HIPAA-covered material. How do most companies deal with securely sending e-mails regarding HIPAA. I ...
1
vote
1answer
230 views

decrypt gpg file with specific key ?? (OS = WindowsXp)

please how i can decrypt file with specific key in batch file mode ? for example i want to :- decrypt file X.txt with key X.pub
1
vote
1answer
325 views

encrypt files by external GPG public key tools?

how i can encrypt files by eternal GPG public key ? for example user A generate public key A.pub and sent to me A.pub and you need from me to encrypt file by a.pub and sent it to you how i can do ...
0
votes
1answer
2k views

Encrypting files with different public keys

How can I encrypt three different files, each with its own public key? For instance, there are three companies (X, Y and Z). Each company sends me its own public key. I want to send a file to each ...
2
votes
1answer
114 views

Single IP address accessing private URLs in emails I'm sending

I'm the IT/programmer guy at a small translation company. I just sent out emails to our translators around the world with an unique URL for them to come into our site and update their password. eg: ...
0
votes
2answers
6k views

Setting up PGP FTP

I have a situation where I need to setup a FTP server with PGP encryption. Currently I use FileZilla w/ SSL, but in this case we are required to use PGP. Any recommended products/procedures from ...
2
votes
3answers
428 views

Threading of PGP Whole Disk Encryption on server

I wish to use a 2010 vintage quad core Xeon server to periodically encrypt 500GB eSATA drives. I have three questions: 1) I assume the current version of WDE is fully multi-threaded and throughput ...
1
vote
1answer
1k views

PGP encryption key with split-knowledge and dual control

An auditor recommends: We recommend that PGP environment be re-keyed using the industry required (ISO x9.8 and x9.24) standards of “split-knowledge and dual control” Is there something that we're ...
0
votes
2answers
82 views

PGP Package Recommendations

I need to use a client's public key to encrypt some csv files as part of an automated package in a windows 2003 domain. Can anyone recommend a PGP package (preferably opensource).
1
vote
1answer
4k views

Error logging with PHP and mod_fcgid

I have a mediawiki install that is acting up. Whenever I try to save an article, it goes to a blank screen. All though if I refresh that blank screen, it will go on to work. I have no idea why it's ...
4
votes
2answers
567 views

Digital signatures and encryption in GMail

I just wonder if there is a way to use SSL certificates or PGP keys for signing my email. At the moment I have to setup S/MIME in Outlook (or another thick client) to send signed messages via SMTP. ...
2
votes
1answer
167 views

PGP - MailCloak/Gpg4Win/etc

I have used Gpg4Win in the past along with FireGPG to have encryption on my emails. I am needing to roll this out to quite a few more people and was wondering if anyone else had some products they ...
2
votes
2answers
6k views

How to setup secure blackberry email that uses PGP encryption?

Im looking to setup private, secure email accounts. I'd like to use PGP encryption. What are my options for doing so?
2
votes
3answers
6k views

Best PGP/GPG Encrypt/Decrypt Script

Is there are good default python or simple shell script that I can use to encrypt and decrypt files via PGP/GPG? I would be running this script every 5 minutes.
4
votes
1answer
351 views

Implementing a PGP Key Server

I am fairly new to PGP and crypto in general. Let's say I have around 200 users and they are all going to have a PGP key for email encryption. I want to have a key server that can assign them keys and ...
19
votes
5answers
14k views

Using PGP keys for SSH

I use a 4096 byte RSA PGP key; since SSH also uses the RSA standard, is it at all possible to use the PGP key as an SSH key without installing additional software on the server (and as little as ...
1
vote
6answers
507 views

Encrypted Email and Proxy to Bypass the Great Firewall [closed]

I have some friends travelling to China, and they would like to get email, use Skype, and browse the web without the fear of the government looking over their shoulder. My first thought is to set up ...