Arch Linux

cherub

Member

Registered: 2014-01-13

Posts: 13

"Provided object too large" error with gpg-agent

GnuPG 2.1.0 was recently released. Supposedly its gpg-agent can now be used as a drop-in replacement for ssh-agent without much trouble (see here). When I swap it in and add my keys with ssh-add as usual, it seems to work. However, when I actually try to retrieve the keys, I get the following error:

2014-11-30 02:07:32 gpg-agent[1277] DBG: skey: (private-key 
2014-11-30 02:07:32 gpg-agent[1277] DBG:        (rsa 
2014-11-30 02:07:32 gpg-agent[1277] DBG:         (n #xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx#)
2014-11-30 02:07:32 gpg-agent[1277] DBG:         (e #010001#)
2014-11-30 02:07:32 gpg-agent[1277] DBG:         (d #xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx#)
2014-11-30 02:07:32 gpg-agent[1277] DBG:         (p #xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx#)
2014-11-30 02:07:32 gpg-agent[1277] DBG:         (q #xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx#)
2014-11-30 02:07:32 gpg-agent[1277] DBG:         (u #xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx#)
2014-11-30 02:07:32 gpg-agent[1277] DBG:         )
2014-11-30 02:07:32 gpg-agent[1277] DBG:        (comment /home/cherub/.ssh/id_rsa))
2014-11-30 02:07:32 gpg-agent[1277] DBG: hash: (data 
2014-11-30 02:07:32 gpg-agent[1277] DBG:        (flags pkcs1)
2014-11-30 02:07:32 gpg-agent[1277] DBG:        (hash sha1 #xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx#))
2014-11-30 02:07:32 gpg-agent[1277] DBG: PKCS#1 block type 1 encoded data:+01ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                                   ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                                   ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                                   ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                                   ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                                   ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                                   ffffffffffffffffffffffffffffffffffffffffffffffffffffffxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                                   xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
2014-11-30 02:07:32 gpg-agent[1277] DBG: rsa_sign   data:+01ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  ffffffffffffffffffffffffffffffffffffffffffffffffffffffxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
2014-11-30 02:07:32 gpg-agent[1277] DBG: rsa_sign      n:+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
2014-11-30 02:07:32 gpg-agent[1277] DBG: rsa_sign      e:+010001
2014-11-30 02:07:32 gpg-agent[1277] DBG: rsa_sign      d:+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
2014-11-30 02:07:32 gpg-agent[1277] DBG: rsa_sign      p:+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
2014-11-30 02:07:32 gpg-agent[1277] DBG: rsa_sign      q:+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xx
2014-11-30 02:07:32 gpg-agent[1277] DBG: rsa_sign      u:+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
2014-11-30 02:07:32 gpg-agent[1277] DBG: rsa_sign    res:+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx \
2014-11-30 02:07:32 gpg-agent[1277] DBG:                  xx
2014-11-30 02:07:32 gpg-agent[1277] DBG: rsa_sign      => Provided object is too large
2014-11-30 02:07:32 gpg-agent[1277] signing failed: Provided object is too large
2014-11-30 02:07:32 gpg-agent[1277] ssh sign request failed: Provided object is too large <gcrypt>
2014-11-30 02:07:32 gpg-agent[1277] ssh request handler for sign_request (13) ready
2014-11-30 02:07:32 gpg-agent[1277] ssh handler 0x7f2445dc2700 for fd 6 terminated

(Private key data replaced with x's).

It says the object is too large for rsa_sign, but the data field is 2040 bits and the result is 2056 bits, so the problem isn't obvious to me. Perhaps someone with better knowledge of RSA or how gpg-agent works could speculate about what's wrong. My SSH keys are 2048 bit RSA, as is my GPG key. Thank you!