[gpg-agent] Empty OPTION xauthority=

2024-03-02 Thread mcepl

Hello,

I am running MicroOS-based distro (which means read-only host and all 
work done in podman containers using distrobox). Because I am afraid 
gpg-agent got confused when it was started from inside a container, I am 
running it on host with systemd --user services (configuration according 
to https://wiki.archlinux.org/title/GnuPG#gpg-agent). When trying to 
decrypt a GPG-encrypted file on host, everything works fine, but when I 
try to decrypt a file in a container (or when using pass(1)) suddenly I 
get an error (it worked for months before, and I am really not certain 
what did change now):


tumbleweed-pkg~$ LANG=en_GB.utf8 gpg --decrypt 
~/.local/share/password-store/mozilla/identita.csob.cz.gpg

gpg: encrypted with rsa4096 key, ID 77D15A36BD4211B2, created 2016-04-27
  "Matěj Cepl "
gpg: Warning: not using 'D96484AC' as default key: No secret key
gpg: Warning: not using '880BC9D8' as default key: No secret key
gpg: all values passed to '--default-key' ignored
gpg: keydb_search failed: IPC syntax error
gpg: public key decryption failed: No secret key
gpg: decryption failed: No secret key
tumbleweed-pkg~$

When looking at log-file I see this:

2024-03-02 10:53:20 gpg-agent[2434] DBG: chan_10 <- OPTION xauthority=
2024-03-02 10:53:20 gpg-agent[2434] DBG: chan_10 -> ERR 67109140 Chyba 
syntaxe IPC  - option argument expected

2024-03-02 10:53:20 gpg-agent[2434] DBG: chan_10 <- BYE

(“Chyba syntaxe” means obviously “A syntax error” in Czech). I have to 
admit I am a bit lost in that protocol log. Who is sending that “OPTION 
xauhtoríty=” line and what should be the right value of it, when running 
on Wayland (no Xorg around)?


Thank you for any advice,

Matěj Cepl

--
http://matej.ceplovi.cz/blog/, @mcepl@floss.social
GPG Finger: 3C76 A027 CA45 AD70 98B5  BC1D 7920 5802 880B C9D8

[…] sleep is no substitute for caffeine.
  -- Robert Storey in review of Debian
 (when describing re-compilation of kernel :-))


___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: On the security of ~/.password-store/.gpg-id [was: Re: Second OpenPGP-card]

2024-03-02 Thread Werner Koch via Gnupg-users
On Fri,  1 Mar 2024 21:56, Daniel Kahn Gillmor said:

> For example, GnuPG could instead offer an interface with explicit
> options to allow the user to choose to match certificates by
> fingerprint, or by e-mail address, or by name, or by full User ID, but

Simply prefix the fingerprint with 0x and gpg will only consider
fingerprints.  RTFM.  You know that very well given that you are the
person who was so keen to be able to maintain a "curated" keyring.


-- 
The pioneers of a warless world are the youth that
refuse military service. - A. Einstein


openpgp-digital-signature.asc
Description: PGP signature
___
Gnupg-users mailing list
Gnupg-users@gnupg.org
https://lists.gnupg.org/mailman/listinfo/gnupg-users