Questions tagged [pgp]

68 questions
231
votes
4 answers

How to export a GPG private key and public key to a file

I have generated keys using GPG, by executing the following command gpg --gen-key Now I need to export the key pair to a file; i.e., private and public keys to private.pgp and public.pgp, respectively.  How do I do it?
rocky
  • 2,413
  • 2
  • 7
  • 5
34
votes
2 answers

GPG Hangs When Private Keys are Accessed

I like to sign my git commits with my PGP key, so I was quite alarmed when I went to git commit -S but instead of prompting for my PGP key passphrase, git just started hanging. I haven't made a change to my GPG setup in several months and have made…
John Leuenhagen
  • 1,147
  • 1
  • 7
  • 16
32
votes
5 answers

sks-keyservers gone. What to use instead?

https://sks-keyservers.net/ (Internet Archive snapshot) says This service is deprecated. This means it is no longer maintained, and new HKPS certificates will not be issued. Service reliability should not be expected. Update 2021-06-21: Due to even…
Ole Tange
  • 33,591
  • 31
  • 102
  • 198
23
votes
2 answers

How to import keys from a keyserver using gpg in debian?

AFAIK The basic concept about gpg/pgp is that for two people who want to create trust between them is both publish a public key and private key (the private key is kept with the user who creates it, doesn't share) with strength (1024 bits at one…
shirish
  • 11,967
  • 27
  • 107
  • 190
13
votes
3 answers

packer - ERROR: One or more PGP signatures could not be verified!

I'm trying to install ncurses5-compat-libs on Arch Linux with packer. But I get this error: ==> ERROR: One or more PGP signatures could not be verified! How can I fix it?
ArchLinuxTux
  • 593
  • 3
  • 8
  • 23
11
votes
1 answer

"gpg-agent is older than us" warning message even after running gpgconf --kill all

I have installed gpg version 2.2.17 from source. When I run gpg --card-status gpg reports: gpg: WARNING: server 'gpg-agent' is older than us (2.2.4 < 2.2.17). gpg: Note: Outdated servers may lack important security fixes. gpg: Note: Use the command…
DragonTamer
  • 381
  • 1
  • 2
  • 8
11
votes
1 answer

How can I encrypt with my previous GPG subkey after creating a new one?

I recently generated two new subkeys to put on an external key card. I previously had a master key (usage marked SC) and a single subkey (marked E). This arrangement was worked fine for what I needed in keeping a few local files private. Just now I…
Caleb
  • 69,278
  • 18
  • 196
  • 226
8
votes
1 answer

How to make PGP's output less verbose in mutt with GnuPG & TOFU?

I recently added trust-model tofu+pgp in my .gnupg/gpg.conf to use TOFU and automatically trust (marginally) keys from e-mails I see for the first time. It has the bad consequence of making PGP's output horribly verbose: gpg: Verified 1 message…
Ted
  • 313
  • 1
  • 2
  • 10
7
votes
2 answers

What to do when a user switches to a new key?

I have some public keys of multiple users in my keyring in GnuPG. One of these users has switched to a new public key. I still have the user's old key which has an assigned trust of ultimate. I just assigned the same trust to his new key. He does…
lord.garbage
  • 2,323
  • 5
  • 27
  • 41
7
votes
1 answer

GNOME keyring manager and gnupg

I get this gpg: WARNING: The GNOME keyring manager hijacked the GnuPG agent. gpg: WARNING: GnuPG will not work proberly - please configure that tool to not interfere with the GnuPG system! when I use gnupg-agent with mutt. But the warning doesn't…
Reed G. Law
  • 667
  • 8
  • 19
6
votes
1 answer

Unknown validity despite having signed the key myself

The key currently has an unknown validity: $ gpg --edit-key some.user pub rsa4096/FAC6C35BDFF9359A created: 2020-03-01 expires: 2022-03-01 usage: SC trust: full validity: unknown sub rsa4096/CDA6BEA851FFCE2E created:…
Luc
  • 3,418
  • 3
  • 26
  • 37
6
votes
2 answers

How to decrypt file that was symmetrically encrypted using GPG?

I've created and symmetrically encrypted a file using GPG: touch test.txt && echo 'test' >> test.txt gpg --output test.txt --symmetric test.txt But now I cannot figure out how to unencrypt it, and surprisingly, I cannot find an example online.…
jds
  • 974
  • 2
  • 10
  • 13
6
votes
2 answers

Using pass on multiple computers. Which pgp key to share?

I'm using pass password manager on multiple computers, linked via a git repository. Which pgp key do I need to share across computers, the public, private, or both, so that I can add /edit /delete passwords on all computers?
user3037237
  • 161
  • 2
5
votes
2 answers

gpg cannot unlock passphrase-less key: "gpg: public key decryption failed: No passphrase given"

I have a gpg setup started with older gpg versions and I did not use a passphrase back then. I would type enter directly when prompted for it. I'm not sure if that means the key isn't encrypted or if it is encrypted with an empty…
knarf
  • 141
  • 1
  • 7
5
votes
1 answer

PGP Keyservers Featuring Download over HTTPS?

My company's firewall blocks keyservers on port 80, and a few of the distributions that I'm hoping to support don't feature HKPS yet for fetching over TLS. Are there keyservers out there that offer a simple download of a given key over HTTPS? For…
Naftuli Kay
  • 38,686
  • 85
  • 220
  • 311
1
2 3 4 5