Re: Why gpg 2.1.9 cannot export secret key without passphrase?

2015-11-27 Thread Dmitrii Tcvetkov
On Fri, 27 Nov 2015 12:05:36 +0100 Guilhem Moulin wrote: >I think this is incorrect. gpg --export's output is always in the >OpenPGP format (possibly armored), while as of 2.1 private material is >stored in another format (in ~/.gnupg/private-keys-v1.d/$KEYGRIP.key). >Thus

Re: gpg-agent prompt slow to show up

2015-11-27 Thread Charlie Brown
> First, how did you install GnuPG? What OS / distribution are you > using? What configuration options are you using (gpg-agent.conf and > gpg.conf)? Sorry for the lack of information. I'm on Debian unstable, and installed GnuPG using apt-get. --gpg.conf- no-greeting

Re: gpg-agent prompt slow to show up

2015-11-27 Thread Daniel Kahn Gillmor
On Fri 2015-11-27 03:43:09 -0500, Charlie Brown wrote: > I'm new to gpg, and I'm trying the agent. > > I noticed that when gpg needs to prompt me for pass phrase, the prompt > shows up about 15 seconds after I issue the command (e.g. gpg > --decrypt or git commit -S). The problem exists with both

Bypass PIN entry

2015-11-27 Thread Harbord Jonathan-EURITEC
I am using GPG on windows. Is there a way to pass the user PIN of a smartcard in a gpg-agent batch file or script? I am using a nitrokey as a private key store for an unattended SFTP system. It simply runs a WinSCP script to pickup and send files via SFTP. Before the script runs I launch I run

Re: Why gpg 2.1.9 cannot export secret key without passphrase?

2015-11-27 Thread Peter Lebbing
On 27/11/15 10:39, Dmitrii Tcvetkov wrote: > Private key exports in cleartext. Are you sure? I can't export an unprotected private key. The topic has come up earlier on this mailing list, in [1]. If I have a passphrase on a private key, and I export it, it prompts me for the passphrase and the

Re: Why gpg 2.1.9 cannot export secret key without passphrase?

2015-11-27 Thread Guilhem Moulin
On Fri, 27 Nov 2015 at 12:39:30 +0300, Dmitrii Tcvetkov wrote: > In this case passphrase is needed to decrypt private key from keyring. > Becuase of passphrase is not provided gpg-agent can't give gpg the > private key. Or perhaps Andrey tries to export an *unprotected* private key using GnuPG

Re: best practices for creating keys

2015-11-27 Thread Peter Lebbing
On 27/11/15 12:41, Andrew Gallagher wrote: > There's a post about how to do this in the list archives: > > https://lists.gnupg.org/pipermail/gnupg-users/2009-May/036505.html Thanks for the pointer! > ... but it's really not worth your while. So long as your primary key > doesn't have E usage

Re: gpg-agent prompt slow to show up

2015-11-27 Thread Neal H. Walfield
Hi, At Fri, 27 Nov 2015 16:43:09 +0800, Charlie Brown wrote: > I'm new to gpg, and I'm trying the agent. > > I noticed that when gpg needs to prompt me for pass phrase, the prompt > shows up about 15 seconds after I issue the command (e.g. gpg > --decrypt or git commit -S). The problem exists

WG: GnuPG 2.1: --auto-key-locate dane

2015-11-27 Thread Felix Seip
-Ursprüngliche Nachricht- Von: Felix Seip Gesendet: Freitag, 27. November 2015 15:13 An: 'Werner Koch' Betreff: AW: GnuPG 2.1: --auto-key-locate dane I tried this once again using the Werner Koch's key: gpg --auto-key-locate dane -v --locate-key w...@gnupg.org

Re: gpg-agent prompt slow to show up

2015-11-27 Thread Charlie Brown
> I have yet to be able to replicate this myself, but i've seen other > people have this problem when they're using pinentry-gtk-2 or > pinentry-gnome3 and they have something wrong with their dbus setup > related to localization (l10n) or accessibility (a11y). > > In particular, there appears to

Re: Why gpg 2.1.9 cannot export secret key without passphrase?

2015-11-27 Thread Andrey Utkin
Thanks to everybody for caring about my issue, and for showing that I'm not alone with it. So this already has been reported in https://bugs.gnupg.org/gnupg/issue2070 and has been discussed in https://lists.gnupg.org/pipermail/gnupg-devel/2014-October/028919.html. So it just needs to be patched.

gpg-agent prompt slow to show up

2015-11-27 Thread Charlie Brown
Hello everyone, I'm new to gpg, and I'm trying the agent. I noticed that when gpg needs to prompt me for pass phrase, the prompt shows up about 15 seconds after I issue the command (e.g. gpg --decrypt or git commit -S). The problem exists with both gpg --use-agent and gpg2. I then tried the

Re: Why gpg 2.1.9 cannot export secret key without passphrase?

2015-11-27 Thread Dmitrii Tcvetkov
On Tue, 24 Nov 2015 03:16:31 +0200 Andrey Utkin wrote: > $ gpg --export-secret-keys > (pops a Xorg dialog window from my console, driving me nuts) > (i give empty passphrase) > (it asks me whether i am sure I want no passphrase) > (I say yes) > gpg: key :

Re: best practices for creating keys

2015-11-27 Thread Peter Lebbing
On 23/11/15 21:31, James wrote: > It appears that information I had read previously was erroneous. I was > under the impression the capabilities (at least for the primary key) > were set in stone, hence my apprehension at avoiding those insatiable > knobs and gears I like to tinker with. ;) Well,