Questions tagged [gpg-signature]
127 questions
1
vote
1 answer
Get prompt for passphrase from terminal when you sign commits
i have my private gpg key in a remote machine and i have setup the user.signingkey. My problem now is that the git commit -S is hanging as it doesnt prompt me to enter the passphrase from the console.
To Import the keys i worked it around using…
b10n1k
- 567
- 5
- 21
1
vote
2 answers
Signing rpm without passphrase
I am trying to disable having any password when I sign , or at least to send it with the signing command.
gpg --list-keys
/root/.gnupg/pubring.gpg
------------------------
pub 2048R/B40C2563 2017-04-11 [expires: 2022-04-10]
uid …
Nsh
- 29
- 6
1
vote
1 answer
Not able to upload public key to keyservers. Maven central repo upload fails
I am trying to publish my repo to maven central repo. I uploaded my public key to :
http://keys.gnupg.net
hkp://keyserver.ubuntu.com
hkp://pool.sks-keyservers.net
I could even receive the response from them using
gpg --keyserver…
Lucene1
- 105
- 1
- 12
1
vote
1 answer
python-gnupg sign / verify a tar archive
I am using python-gpg to sign / encrypt / verify / decrypt a tar archive.
code snippet -
# import private key into gnupghome
_pvtKey = urllib2.urlopen(_certurl)
_pv_data = _pvtKey.read()
gpg.import_keys(_pv_data)
.....
stream =…
Deepak Chaudhary
- 152
- 1
- 11
1
vote
0 answers
gpg verify of GNU Emacs download fails - Did I do it correctly?
I have downloaded a GNU tar archive (emacs-26.1.tar.xz) and now want to verify it against its signature file. gpg returns with the verify option the following output:
gpg: no valid OpenPGP data found.
gpg: the signature could not be…
halloleo
- 9,216
- 13
- 64
- 122
1
vote
1 answer
Linux Debian apt-get update ERROR / Atom missing GPG key
I'm running linux debian 9.4.0 64-bit on my machine. Since I installed atom text editor, I receive an ERROR while running ap-get update. The error reads the following:
W: GPG-Fehler: https://packagecloud.io/AtomEditor/atom/any any InRelease: Die…
dennisN86
- 79
- 1
- 7
1
vote
0 answers
Go basic exec command having issue printing output of command
I am new to Go and trying to run a simple program with GPG verify a file with my signature file.
Here is my snippet:
out, err := exec.Command("gpg", "--verify", "xyz.json.sig", "xyz.json").Output()
if err != nil {
fmt.Printf("%s", err)
…
Nik
- 191
- 2
- 11
1
vote
2 answers
What data is being signed in git signed tags?
I would like to know what exactly is signed inside git signed tags. Let's analyze Linux v4.14-rc3 signature.
$ git show v4.14-rc3 | head -n 20
tag v4.14-rc3
Tagger: Linus Torvalds
Date: Sun Oct 1 14:55:06 2017…
desowin
- 168
- 13
1
vote
2 answers
How to retain commit ssh passphrase for 1 hour?
I have added this option to my .gitconfig
[commit]
gpgsign = true
But Git asks me for my passphrase each time I do a commit. I don't want to create a new keypair with an empty passphrase. I rather would like Git to retain my passphrase for few…
nowox
- 25,978
- 39
- 143
- 293
1
vote
1 answer
Unable to create new gnupg object in Symfony Controller
I am converting a project from pure PHP to Symfony and I am having problems working with gnupg in Symfony.
My problem is the following: I configured gnupg following PHP's docs without any problem, I restarted my webserver and I also restarted the…
John Graham
- 13
- 2
1
vote
1 answer
Why md5 is mentioned in rpm signature verification output with --nodigest option
I was validating a gpg key with following command.
rpm --checksig --nodigest
My rpm is signed with RSA/SHA256 algorithm.
The question is: Why my output has (md5) in it.
Output:rsa (md5) pgp OK
When i run the same command with -v…
Rupesh
- 378
- 7
- 21
1
vote
1 answer
Verification of PGP signature using BouncyCastle
I've generated a PGP Signature:
-----BEGIN PGP SIGNATURE-----
Version: GnuPG…
zcaudate
- 13,998
- 7
- 64
- 124
0
votes
0 answers
Change git history while preserving timestamps of GPG signatures
I’m trying to erase sensitive data from a git history of an old local repository before pushing it to Github, while also maintaining/forging the original GPG signature timestamps.
I know it is not recommended to change git history like this, but I…
Ape
- 9
- 2
0
votes
0 answers
Python: PGP/GPG sign and verify a zip file
I'm getting a zip file in flask POST request and I need to verify that the zip is PGP/GPG sign.
Is there any option to add signature file to the zip during the sign and verify this file?
How can I be sure no one changed the zip and the zip is…
Leah
- 25
- 8
0
votes
1 answer
Unable to verify commits with gpg - Bitcoin alerts for Nostr
I'm trying to run this project on my nostr account https://github.com/yukibtc/bitcoin-alerts with my Windows machine.
As I clone the repo and run the command
gpg --keyserver hkps://keys.openpgp.org --recv-keys…
