Unix and Linux Stack Exchange
Unix and Linux Stack Exchange

Questions tagged [pinentry]

28 questions
15
votes
2 answers

How to get pinentry-curses to start on the correct tty?

I use gpg-agent for managing both PGP e SSH identities. The agent is started with a script like this gpg_agent_env="$XDG_CACHE_HOME/gpg-agent.env" export GPG_TTY="$(tty)" if ! ps -U "$USER" -o ucomm | grep -q gpg-agent; then eval "$({gpg-agent…
Rnhmjoj
  • 293
  • 1
  • 2
  • 9
12
votes
2 answers

Pinentry fails with gpg-agent and SSH

I'm running Fedora 22. I'm trying to setup GnuPG to have my SSH connections authenticated using my PGP authentication subkey that is located on my Yubikey Neo. I have a systemd unit starting the gpg-agent as following: /usr/bin/gpg-agent…
Spack
  • 1,987
  • 1
  • 17
  • 18
8
votes
2 answers

GPG can't decrypt: no pinentry program

I can't decrypt my passwords with pass neither with gpg directly. gpg: encrypted with rsa4096 key, ID id, created creation_date "name " gpg: public key decryption failed: No pinentry gpg: decryption failed: No pinentry It…
blackyellow
  • 609
  • 2
  • 4
  • 15
6
votes
0 answers

Intermingled input when using local gpg-agent from remote site

I'm starting a local gpg-agent on my Mac, with the extra-socket option. Then I connect to a remote site using SSH, forwarding the remote S.gpg-agent socket to the local S.gpg-agent.extra socket. This works: ssh -R…
Kusalananda
  • 320,670
  • 36
  • 633
  • 936
4
votes
1 answer

How to make the default-cache-ttl option of gpg-agent work?

I use pass as a password manager. I would like my passphrase to be cached during a certain amount of time to avoid retyping my passphrase every time that I want to clip one of my passwords. Pass is using gpg-agent to decrypt passwords. According to…
Alain Danet
  • 61
  • 1
  • 6
4
votes
1 answer

About pinentry usage along with gpg

Is mandatory to use pinentry with gpg2? Why is pinentry better over legacy prompt?
sebelk
  • 4,209
  • 10
  • 35
  • 54
4
votes
0 answers

Enigmail Thunderbird pinentry requests all passwords to all secret keys

I want to read a GPG encrypted email using Thunderbird Enigmail from [email protected] and Edit > Account Settings > Account.1 > OpenPGP Security has "Use specific OpenPGP key ID" selected. However, when I select the message in order to read,…
jtd
  • 176
  • 4
4
votes
0 answers

Decrypting with GPG after a "su - different user"

I have cron job running a script in the cron of "USER A" that encrypts many files in a loop using the gpg command below: gpg --batch --cipher-algo AES256 --passphrase "PASSWORDISHERE" -c FILENAME "USER A" has elevated permissions, can not be…
Dude
  • 41
  • 2
3
votes
2 answers

Why would GPG Pinentry be slow when opening in GUI but instantaneous when opening in CLI?

Having a hard time figuring out the debugging steps for this behavior. I'll run some gpg command and, typically, about 20 seconds later a GUI Pinentry window will pop up where I type in my password and the command proceeds. Occasionally though, the…
Eric Ihli
  • 211
  • 1
  • 8
3
votes
0 answers

Can't sign/encrypt unless I start gpg-agent manually

I recently set up Ubuntu in a VM for development work, but found that git couldn't sign my commits. Investigating further, I found that gpg-agent wasn't able to request my passphrase via pinentry-curses, producing the Inappropriate ioctl for device…
Ben Blank
  • 142
  • 9
3
votes
0 answers

How can I suppress the pinentry dialogue box if there is no gpg password?

I'm using (neo)mutt with GPG. I've set my gpg password to empty, but when I attempt to decrypt an incoming email, mutt still presents a pinentry dialogue box. If I just press Enter (with no string), the dialogue box will be dismissed, and the email…
Sparhawk
  • 19,561
  • 18
  • 86
  • 152
3
votes
1 answer

Non-GUI based pin-entry for gpg

I'm in the process of remotely viewing and selecting hundreds of images, some of which are encrypted with a symmetric key. I log in to the remote desktop machine using ssh. The viewing is not fast, but bearable once the viewer is open, but every…
Cina
  • 35
  • 5
2
votes
0 answers

GPG using sudo under another user, is `pinentry-mode loopback` safe?

There are 2 users: user1 and user2. When trying to use gpg via sudo (symmetric decryption): user1@host: sudo -u user2 gpg /home/user2/pass.gpg an error gpg: decryption failed: No secret key. I set it to --pinentry-mode loopback and the password…
NewLinux
  • 147
  • 5
2
votes
1 answer

Strange error with GnuPG: claims "no secret key" when terminal is too small

This is the content of my .gnupg/gpg-agent.conf: pinentry-program /usr/bin/pinentry-curses When I try to retrieve a password from pass' store, e.g. via pass -c path/to/password in a very small-sized terminal window, the command errors like…
Enlico
  • 1,471
  • 16
  • 35
2
votes
1 answer

GPG pinentry not receiving key presses during passphrase entry when forwarding gpg-agent

When forwarding my gpg-agent to a remote server I am able to see the my private key listed. Even though I unlocked my key locally I still need to unlock it on the remote machine. However when I try to unlock on the remote machine it sends a pinentry…
Reverie
  • 21
  • 3
1
2