Questions tagged [gpg]

GNU Privacy Guard (GnuPG or GPG) is OpenPGP compliant FOSS alternative to PGP encryption software.

162 questions
1
vote
1 answer

How to get expiry date for yum repo signing keys

I recently had a package signing key expire preventing some automatic updates from installing so am now setting up monitoring to make sure we are alerted if this happens again. On Debian systems I can use apt-key to show all the repo keys and their…
Jon Reeves
  • 438
  • 2
  • 8
1
vote
0 answers

GPG disabling ssh support for an authentication key coming from a smartcard

When a gpg smartcard (e.g. yubikey) is inserted and contains an authentication key, the key is automatically enrolled by the gpg-agent. That means the key is usable for any ssh operation without needing to add its keygrip inside the file…
djoproject
  • 157
  • 2
  • 7
1
vote
2 answers

GPG I am trying to create a script to automaticaly associate an imported ssh key to a primary key

I am trying to attach an imported ssh key to an existing primary key. The imported ssh key exists inside ~/.gnupg/private-keys-v1.d/ and is usable through the gpg-agent. When I associate it manually to a primary key, it works perfectly. I am…
djoproject
  • 157
  • 2
  • 7
1
vote
0 answers

Yubikey won't receive an imported SSH auth key

I had a SSH key which I imported without problems in my GPG keyring as auth key using pem2openpgp from monkeysphere. The imported key works fine. I removed its SSH version from ~/.ssh and switched from ssh-agent to gnupg-agent with SSH support. The…
Qippur
  • 135
  • 1
  • 10
0
votes
0 answers

Fix or explain tty issue and gpg2

I'm having an issue importing or generating gpg secret keys on ubuntu 18.04 with my main (sudo) non-root user. With root user I have no problems with gpg, but non-root and it's basically permission denied. When I execute tty, you can see g&o have no…
0
votes
1 answer

Problematic apt-get update due to missing gpg keys

I accidentally deleted some Debian gpg keys when testing out apt-key del. (I don't remember which key) I have redownloaded the deb package and extracted the gpg keys. Then I used apt-key add to add those keys to the keyring. All 3 Debian Stretch…
user121392
  • 13
  • 1
  • 6
0
votes
1 answer

Aptly publish asking for password although --passphrase flag is set

I unsuccessfully try publishing an APTLY snapshot (about 80GB) using aptly publish snapshot --batch=true --passphrase="SuperSecretPassWord" --distribution="mydistro" current-snapshot After about 15 minutes I'm always being asked for my key's…
0
votes
0 answers

Where is the networker public key?

I am trying to install a networker backup client on linux (CentOS). At the moment I have to use "yum install --nogpgcheck" to do this, since I could not find the public gpg-key for their rpms. According to the installation manual this is the way to…
Nils
  • 7,695
  • 3
  • 34
  • 73
0
votes
1 answer

rhel7 yum repository metadata GPG signatures

I'm trying to sign yum repo metadata using GPG, as part of a Jenkins job. This is proving more difficult than I first imagined, but I'm sure lots of people must have done this already. I've worked out that I can do it on the terminal using :- gpg…
0
votes
1 answer

How can I host my public GPG key on S3?

I've been packaging some proprietary software that runs on Raspbian into .deb files and hosting them in a private S3 bucket using a program called deb-s3. I also use a program called apt-transport-s3 which allows the individual devices to download…
soapergem
  • 719
  • 4
  • 13
  • 29
0
votes
1 answer

keysize for Release.gpg?

What is the required keysize for generating Debian Release.gpg files?
jldupont
  • 1,849
  • 4
  • 24
  • 27
0
votes
1 answer

How to share or encrypt sensitive git repos

My organization is using Openshift for running several applications. Our policy thus far has been to always store sensitive values (DB passwords, API keys, etc) in environment variables and never as part of the codebase. However, multiple projects…
crgwbr
  • 29
  • 6
0
votes
1 answer

Where and how properly keep my private and public gpg keys?

What's the proper way to keep safe and backup my private and public gpg keys? Can I keep them both in the same place on a flash usb stick, is there any security about that? Or should I necessarily keep their backups separately on different devices?
Meji
  • 107
  • 2
0
votes
0 answers

Trying to load posted public key from http://pgp.mit.edu:11371/ after loading it there

So, I run pgp --dry-run --import test.asc on the public key I gave to the site and then I look it up with that key that it gives back and it says not found. How to do this properly such that I can test that my key can be looked up on that…
Dean Hiller
  • 911
  • 4
  • 15
  • 35
0
votes
3 answers

how do I covert a certificate with extension .cer to .asc

I have a certificate file (with extension .cer) that has content which looks something like this. -----BEGIN CERTIFICATE----- lots of data here -----END CERTIFICATE----- It is our signing certificate. I am sharing it with a third party so that…