Re: Using gnupg to crypt credentials used by application to access a database server

2018-07-17 Thread Werner Koch
On Mon, 16 Jul 2018 09:51, w...@gnupg.org said: > If you use a smartcard there is a hack in scdaemon which allows to work > without a PIN. Here is what scdaemon's code has to say about this hack: GnuPG makes special use of the login-data DO, this function parses the login data to store

Re: Using gnupg to crypt credentials used by application to access a database server

2018-07-16 Thread Michael Kesper
Hi all, Am Montag, den 16.07.2018, 09:29 +0200 schrieb Matthias Apitz: > Michael, I do use pass too for all my firefox credentials for access > of > webpages and services, i.e. I know how this works. I use for this > GnuPG > together with an OpenPGP card and to unlock the password storage I >

Re: Using gnupg to crypt credentials used by application to access a database server

2018-07-16 Thread Wiktor Kwapisiewicz via Gnupg-users
If you use a smartcard there is a hack in scdaemon which allows to work without a PIN. Another alternative to an unlocked smartcard would be to use the TPM as the key would be non-exportable and bound to just one machine. There was a series of patches to add TPM keys support but I don't know

Re: Using gnupg to crypt credentials used by application to access a database server

2018-07-16 Thread Werner Koch
On Sat, 14 Jul 2018 15:15, g...@unixarea.de said: > Decrypting with GnuPG needs a passphrase, normally read from /dev/tty It only needs passphrase if you set a passphrase. For public key encryption it is perfectly fine not to set a passphrase because it is expected that there are no other users

Re: Using gnupg to crypt credentials used by application to access a database server

2018-07-16 Thread Matthias Apitz
El día Monday, July 16, 2018 a las 09:06:58AM +0200, Michael Kesper escribió: > Hi all, > > Am Samstag, den 14.07.2018, 15:15 +0200 schrieb Matthias Apitz: > > We are looking for a way to change this situation and one of the > > options > > or ideas I have, is crypt the credentials with GnuPG in

Re: Using gnupg to crypt credentials used by application to access a database server

2018-07-16 Thread Michael Kesper
Hi all, Am Samstag, den 14.07.2018, 15:15 +0200 schrieb Matthias Apitz: > We are looking for a way to change this situation and one of the > options > or ideas I have, is crypt the credentials with GnuPG in some file. I use pass [0] for this. It uses gnupg under the hood and also has ansible

Re: Using gnupg to crypt credentials used by application to access a database server

2018-07-15 Thread gnupg
Matthias Apitz wrote: > Hello, > > We have large application servers (written in C and C++), but also Perl > and Java applications which all contact a Sybase database server over > the network to do its work. They have to present a USER and a PASSWORD > information to connect to the Sybase ASE

Using gnupg to crypt credentials used by application to access a database server

2018-07-14 Thread Matthias Apitz
Hello, We have large application servers (written in C and C++), but also Perl and Java applications which all contact a Sybase database server over the network to do its work. They have to present a USER and a PASSWORD information to connect to the Sybase ASE listening on some port. As the USER