Re: gpg-agent rejects correct password for ssh keys

2010-03-01 Thread Werner Koch
On Fri, 26 Feb 2010 17:20, vor...@ucw.cz said: The agent asks for a passphrase to decrypt the key. I type it again and, this is the problem, it says it is incorrect. I'm sure I typed it correctly (I tried Please see http://lists.gnupg.org/pipermail/gnupg-users/2010-January/038045.html

Re: David's findings

2010-03-01 Thread David Shaw
On Feb 28, 2010, at 11:54 PM, Robert J. Hansen wrote: David and I apparently had a bit of a misunderstanding. I thought he was going to attempt to figure out information based solely on the key material: he was using it as a springboard for other research. I think that both of us are

Re: key question

2010-03-01 Thread reynt0
On Sun, 28 Feb 2010, David Shaw wrote: On Feb 28, 2010, at 4:20 PM, reynt0 wrote: On Sat, 27 Feb 2010, Robert J. Hansen wrote: . . . The perfect is the enemy of the good. Just to note, did RJH actually intend to write ...the enemy of the good enough., which I believe is the usual quote?

Offline Primary Key

2010-03-01 Thread Phillip Susi
I would like to keep the private portion of my primary key stored offline and use an expiring secondary key for day to day signing. To accomplish this I have tried backing up the key after creating the secondary signing key, then attempting to delete the private portion of the primary key

Re: Offline Primary Key

2010-03-01 Thread David Shaw
On Mar 1, 2010, at 12:20 PM, Phillip Susi wrote: I would like to keep the private portion of my primary key stored offline and use an expiring secondary key for day to day signing. To accomplish this I have tried backing up the key after creating the secondary signing key, then attempting

Re: Offline Primary Key

2010-03-01 Thread John Clizbe
David Shaw wrote: Didn't someone write a nice HOWTO about offline private keys at one point? I thought there was one out there, but can't find it at the moment. Can anyone post the URL for Philip? Adrian von Bidder's page is the only one that memory serves up:

Re: Offline Primary Key

2010-03-01 Thread Grant Olson
Can anyone post the URL for Philip? David http://fortytwo.ch/gpg/subkeys signature.asc Description: OpenPGP digital signature ___ Gnupg-users mailing list Gnupg-users@gnupg.org http://lists.gnupg.org/mailman/listinfo/gnupg-users

Re: Offline Primary Key

2010-03-01 Thread Phillip Susi
On 3/1/2010 1:57 PM, David Shaw wrote: What you need to do is an --export-secret-subkeys (there is no such command as --delete-primary-keys). So, starting from a state where your whole key (primary and all secondaries) are all imported to your GPG instance, do: Yes, I meant

Re: Offline Primary Key

2010-03-01 Thread David Shaw
On Mar 1, 2010, at 2:59 PM, John Clizbe wrote: David Shaw wrote: Didn't someone write a nice HOWTO about offline private keys at one point? I thought there was one out there, but can't find it at the moment. Can anyone post the URL for Philip? Adrian von Bidder's page is the only one

Re: Offline Primary Key

2010-03-01 Thread David Shaw
On Mar 1, 2010, at 3:31 PM, Phillip Susi wrote: On 3/1/2010 1:57 PM, David Shaw wrote: What you need to do is an --export-secret-subkeys (there is no such command as --delete-primary-keys). So, starting from a state where your whole key (primary and all secondaries) are all imported to

Re: Offline Primary Key

2010-03-01 Thread David Shaw
On Mar 1, 2010, at 4:11 PM, Phillip Susi wrote: On 3/1/2010 3:37 PM, David Shaw wrote: This does the trick, but I still do not understand why --delete-secret-key removes BOTH the primary and subkey secrets when I specifically gave only the ID of the subkey? Shouldn't it remove exactly what

Re: Offline Primary Key

2010-03-01 Thread Phillip Susi
On 3/1/2010 3:37 PM, David Shaw wrote: This does the trick, but I still do not understand why --delete-secret-key removes BOTH the primary and subkey secrets when I specifically gave only the ID of the subkey? Shouldn't it remove exactly what I say and no more? It has to do with how keys are

Re: How to give the keywork from command line.

2010-03-01 Thread David Shaw
On Feb 28, 2010, at 2:58 PM, Grant Olson wrote: On 2/28/2010 10:41 AM, Mario Castelán Castro wrote: February 27th 2010 in gnupg-users@gnupg.org thread Hot to give the keyword from the command line Thanks Laurent, it works :). Also, if you encrypt to a key, you shouldn't need to provide a

Re: How to give the keywork from command line.

2010-03-01 Thread Mario Castelán Castro
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 February 27th 2010 in gnupg-users@gnupg.org thread Hot to give the keyword from the command line Also, if you encrypt to a key, you shouldn't need to provide a passphrase at all, unless you need to sign the file too. I get nervous about

Re: David's findings

2010-03-01 Thread Robert J. Hansen
Both the religion (not sure why this was counted as two 'misses') You phrased it in your email to me as two sentences, and I was cutting back and forth between reading your email and composing the email to the list. Bullet point: raised Methodist, no, Episcopal, cut over to the compose

Re: Offline Primary Key

2010-03-01 Thread Faramir
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 David Shaw escribió: ... Didn't someone write a nice HOWTO about offline private keys at one point? I thought there was one out there, but can't find it at the moment. Can anyone post the URL for Philip?