Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [gpg]

GNU Privacy Guard (GnuPG or GPG) is OpenPGP compliant FOSS alternative to PGP encryption software.

162 questions
12
votes
3 answers

Encrypted offsite backup using GPG with private key never on backup server?

I have a backup server, that creates xz compressed tar archives of directory trees to be backed up. These tar archives can get huge (multiple TBs), are split into pieces (2.5TB), and each piece is written to a LTO-6 tape, and the tapes go…
oberstet
  • 319
  • 1
  • 4
  • 14
12
votes
2 answers

Is it possible to use a gpg public key to encrypt a message without importing the key?

Sometimes I might want to use someone's gpg key to send a message but will have no need to ever use the key again. Importing the key in this instance seems unnecessary. I've searched, but can't find anything suggesting this is possible. It is a bit…
Patrick Keery
  • 123
  • 1
  • 4
12
votes
4 answers

gpg-agent says agent exists, but gpg says agent doesn't exist?

I'm struggling with some issues while scripting gpg with bash on a Debian 6.0.6 box. I have a script that does a batch of operations and wants to make sure that a gpg-agent is available before it attempts to proceed. Since gpg-agent will take no…
Craig Ringer
  • 11,083
  • 9
  • 40
  • 61
10
votes
2 answers

How does changing a GPG encryption key's passphrase work?

I know that I can do (edit: fixed this; I'm interested in gpg NOT openssh) gpg --edit-key ...to change my passphrase for my key, but I'm not sure what this means. If I'm encrypting data on box A and decrypting on box B (say with duplicity) do I…
jberryman
  • 914
  • 2
  • 10
  • 25
10
votes
5 answers

Why does apt-get update tell me to run apt-get update?

So I have this going on: # apt-get update Get:1 http://ftp.us.debian.org etch Release.gpg [1032B] Hit http://ftp.us.debian.org etch Release (...bunch more of this elided...) Hit…
chaos
  • 7,483
  • 4
  • 34
  • 49
9
votes
3 answers

Add second sub-key to unattended GPG key

I am writing a bash script which generates unattended GPG keys, I have looked through Unattended Usage of GPG and was surprised to find that 'Currently only one subkey can be handled.' I am unable to find if there is a way to modify a GPG key to add…
user388623
9
votes
3 answers

Debian - "WARNING: untrusted versions of the following packages will be installed!"

When i try to install or update any packages I get: Untrusted packages could compromise your system's security. You should only proceed with the installation if you are certain that this is what you want to do. I strongly suspect this is related to…
user1794469
  • 217
  • 2
  • 6
8
votes
1 answer

Unable to generate GPG keys without passphrase on Ubuntu 18.04

Has anyone tried creating GPG keys for encrypted pillars on Ubuntu 18.04? I'm using the following command to attempt to generate the keys: gpg --gen-key --homedir /etc/salt/gpgkeys When I run that I get the usual set of questions, full name, email,…
Soviero
  • 4,366
  • 8
  • 36
  • 60
8
votes
3 answers

Force the use of a gpg-key as an ssh-key for a given server

I configured ssh to use GPG as my ssh-agent and if I remove the ~/.ssh folder, I can ssh into my server fine using my gpg key. However, my ~/.ssh folder has over a dozen different ssh keys in it, and if I try to ssh when it is there, I get a…
Mike D
  • 318
  • 3
  • 7
8
votes
1 answer

Bad signatures or NOKEY errors on RPMs I just signed

I'm having serious problems getting RPM signing working for RHEL / CentOS 5 hosts. TL;DR: RPM signing isn't working, and it's working in a variety of insane and erratic ways depending on the exact GPG key size and format and even where it was…
Craig Ringer
  • 11,083
  • 9
  • 40
  • 61
8
votes
1 answer

Using gpg-agent over ssh

I'm having a problem using the gpg-agent over ssh via a single command line. Here is my configuration : Server A : triggering the command via ssh. ssh user@serverB "sudo -E /path/to/script.sh" Server B : Executing the script requiring a passphrase…
Tony
  • 281
  • 3
  • 8
7
votes
0 answers

Export Private ed25519 Key From GnuPG For Use in SSH

Is there a way to create an id_ed25519 (not id_ed25519.pub) file from an ed25519 keypair stored in GnuPG? I've started keeping track of my SSH keys in GPG: sec rsa3072 2017-12-12 [C] DDD8CEFDE281D48CBBF0C56FE2AA8C94C8A7C456 uid …
Dave
  • 223
  • 2
  • 7
7
votes
1 answer

Mailing list + PGP/GPG support

I would like to create such mailing list where every contributor must sign his/her messages with PGP/GPG, otherwise mailing list software would block unsigned message. All PGP/GPG public keys of users allowed to post should be stored somewhere on…
user60133
7
votes
2 answers

How can I use Duplicity with a symmetric key?

I am using duplicity to perform backups on my server. Right now duplicity is encrypting the backup using a GPG public-private key system. I would prefer to encrypt the backup files using just a passphrase, so I don't have to try and keep up with…
mclark1129
  • 555
  • 2
  • 11
  • 28
6
votes
2 answers

replace or remove GPG signature on RPM

Is there a way to remove or replace an existing GPG signature on an RPM? I am placing a few obscure RPMs on an internal repo we use for supplementary rhel/centos packages. A few of those RPMs are already signed. I would like to remove those…
carlos
  • 173
  • 1
  • 4
1
2
3
…
10 11