Questions tagged [gpg]

GNU Privacy Guard (GnuPG or GPG) is OpenPGP compliant FOSS alternative to PGP encryption software.

162 questions
4
votes
1 answer

How to Disable GPG checks per Channel in Spacewalk?

Is it possible to disable GPG checks on a per channel basis in Spacewalk? For patching of my servers, I've converted from using local yum repositories on the clients under /etc/yum.repos.d, to registering the client with a spacewalk server. However,…
blindsnowmobile
  • 377
  • 1
  • 5
  • 16
4
votes
1 answer

GPG Encryption: Am I using the right keys?

I have a process to encrypt a bank file using OpenPGP (via BouncyCastle) and SFTP the file to the bank for financial processing. They sent me a public key file, which I examined the key using the following command (results follow): C:\Program Files…
Jeremy Holovacs
  • 407
  • 1
  • 6
  • 22
4
votes
2 answers

Duplicity - how to put passphrase in command?

I've tried a number of obvious commands as detailed in Duplicity Man page to do this but it doesn't seem to work. Scenario I'm SSH'ing to a machine, then running Duplicity; below is the command, of sorts:- ssh -i /keys/key.pem -o…
waxical
  • 344
  • 2
  • 5
  • 12
4
votes
1 answer

gnupg ELG vs ELG-E

We recently upgraded the server we use to gpg encrypt files with public key encryption. Old server had gnupg version 1.2.6. On the new server, gnupg version 2.0.18, we imported our gpg keyring from the old server. On our old server we have a…
user129545
  • 73
  • 2
  • 9
4
votes
2 answers

GPG encrypt and decrypt with ssh-agent

I use ssh regularly and have ssh-agent set up. How can I use ssh keys to gpg-encrypt a file? Edit: It seems that this is impossible. Why? ssh can encrypt traffic, so why not also files?
nalply
  • 1,087
  • 1
  • 10
  • 19
4
votes
2 answers

Trust gpg key via script

When performing an automated server deployment, I can upload and import gpg keys via script. But I cannot trust keys. I tried gpg --batch --yes --edit-key keyname trust 5 and echo 5 | gpg --batch --yes --edit-key keyname trust - In non-batch mode…
lonix
  • 896
  • 10
  • 23
3
votes
1 answer

How to restore a Duplicity backup to a new host?

Had a catastrophic failure on a RAID array and lost everything. Have a full set of backups on S3 via duplicity (2003 files), encrypted with GPG. I have the passphrase and a copy of the private key used to encrypt the backups. I have imported the…
SteveJ
  • 482
  • 1
  • 7
  • 13
3
votes
1 answer

Is is still necessary to export the trustdb file?

I'm reading up on these instructions for backing up gpg keys: https://gist.github.com/chrisroos/1205934 He says that in the gpg instructions it says that it's better to export trustdb and simply backing it up. However these instructions were…
Ole
  • 223
  • 1
  • 6
3
votes
0 answers

Anubis as GPG proxy

I'm trying to setup GNU Anubis to act as a sort of proxy to sign/encrypt emails coming from a service. The service is currently configured to send email using our SMTP server. The idea would be to point the service to Anubis and then point Anubis to…
mikeazo
  • 149
  • 4
3
votes
3 answers

gnupg 'libgpg-error.so.0 no version information available'

I'm trying to compile gnupg-2.1.0 for Debian Wheezy, I've downloaded and compiled the required libraries (libgpg-error-1.17, libgcrypt-1.6.2, libksba-1.3.2, libassuan-2.1.3, and pth-2.0.7 in that order) via ./configure, make, make install. I then…
Prime
  • 131
  • 1
  • 4
3
votes
2 answers

apt warnings with HP SDR/MCP repo on Ubuntu

I'm using the HP SDR system (MCP specifically) for Linux packages to manage the HP hardware RAID, iLo, etc. The kernel drivers for the hardware are upstream, so these are just management utilities. http://downloads.linux.hp.com/SDR/ deb…
roktechie
  • 103
  • 1
  • 2
  • 10
3
votes
1 answer

dget complains that public key not found

I'm trying to backport a package, but dget (dscverify) says that it can't check the signature because of public key not being found: [root ~/build/openssl] dget -x…
x-yuri
  • 2,141
  • 2
  • 24
  • 29
3
votes
1 answer

Should the GPG key of a debian repository be shared among its maintainers?

I'm following this tutorial to set up a debian repository https://wiki.debian.org/SettingUpSignedAptRepositoryWithReprepro This repository will be managed by me and my colleagues. We want to sign the packages and the repo itself, so I need a GPG…
3
votes
1 answer

Encrypting all incoming mail with public pgp key per user

What I'm trying to do is be able to take all incoming messages and encrypt them with that users public pgp key. I'm running postfix + courier etc. http://flurdy.com/docs/postfix/ I've read through this…
TheEditor
  • 231
  • 1
  • 5
  • 15
3
votes
1 answer

Crypto key storage and recovery -- best practices?

We have a bunch of SSH, GPG, SSL and other private keys that, obviously: must only be available to the smallest number of people possible can't be "lost" if a hard drive dies or the building burns down (because a lot of data would otherwise be…
Johannes Ernst
  • 1,097
  • 5
  • 17
  • 27