Arch Linux

aurelieng

Member

Registered: 2010-02-02

Posts: 104

Re: [SOLVED] gnupg 2.1.0-4 upgrade breaks passphrase via STDIN

Wow this is weird, at least I can sign emails again. Thank you TE for clearing this up. It didn't work at first until I edited my config files. That wasn't mentioned on the mailing list.

I have no luck so far with enigmail+thunderbird, despite the instructions on the wiki. I can dig further if I know it can work, otherwise I'll just wait. Are you using Enigmail+TB too ? Can you enrypt mails too?

chaonaut

Member

From: Kyiv, Ukraine

Registered: 2014-02-05

Posts: 382

Re: [SOLVED] gnupg 2.1.0-4 upgrade breaks passphrase via STDIN

I've closed out the Arch bug report and GnuPG bug report - I tried to describe the change with a new wiki subsection:
https://wiki.archlinux.org/index.php/Gn … passphrase
Please clean it up with more info from your own testing/usage scenarios. I can only confirm duply/duplicity are working...

as for me, gpg-preset-passphrase still not working with those new options.
after restarting gpg-agent and running /usr/lib/gnupg/gpg-preset-passphrase -c XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX,  the damn thing asks passhrase again anyway.
as a workaround, i set default-cache-ttl to 86400 (24h), but that's an ugly crutch.

Last edited by chaonaut (2014-11-30 12:17:16)

---

— love is the law, love under wheel, — said aleister crowley and typed in his terminal:
usermod -a -G wheel love

Kooothor

Member

From: Paname

Registered: 2008-08-02

Posts: 228

Re: [SOLVED] gnupg 2.1.0-4 upgrade breaks passphrase via STDIN

$ grep loop ~/.gnupg/*.conf
~/.gnupg/gpg-agent.conf:allow-loopback-pinentry
~/.gnupg/gpg.conf:pinentry-mode loopback

This worked for me, with mutt for signing emails. Thanks!

---

ktr

graysky

Wiki Maintainer

From: :wq

Registered: 2008-12-01

Posts: 10,643

Website

Re: [SOLVED] gnupg 2.1.0-4 upgrade breaks passphrase via STDIN

Thank you all for this thread.  The solution provided also work for detach-sign operations... although in my case, it was enough to just added the line to a freshly created ~/.gnupg/gpg-agent.conf and not use the extra switch.  In fact, the extra switch throws errors:

% gpg --detach-sign --pinentry-mode loopback --local-user 5EE46C4C md5sums.txt                       :(
gpg: setting pinentry mode 'loopback' failed: Not supported
gpg: skipped "5EE46C4C": No secret key
gpg: signing failed: No secret key

---

CPU-optimized Linux-ck packages @ Repo-ck  • AUR packages • Zsh and other configs

Allan

Pacman

From: Brisbane, AU

Registered: 2007-06-09

Posts: 11,472

Website

Re: [SOLVED] gnupg 2.1.0-4 upgrade breaks passphrase via STDIN

Just create a new root key:

		sudo rm -fr /etc/pacman.d/gnupg
		sudo pacman-key --init
		sudo pacman-key --populate archlinux

You probably want to install and start haveged to speed up key generation.  The add and lsign any additional keys needed.

---

PGP Key: F99FFE0FEAE999BD | I develop pacman - buy me a drink!

graysky

Wiki Maintainer

From: :wq

Registered: 2008-12-01

Posts: 10,643

Website

Re: [SOLVED] gnupg 2.1.0-4 upgrade breaks passphrase via STDIN

@Allan - Sorry, I don't understand your suggestion.  How does the contents of /etc/pacman.d/gnupg affect detach-sign operations?

---

CPU-optimized Linux-ck packages @ Repo-ck  • AUR packages • Zsh and other configs

Allan

Pacman

From: Brisbane, AU

Registered: 2007-06-09

Posts: 11,472

Website

Re: [SOLVED] gnupg 2.1.0-4 upgrade breaks passphrase via STDIN

@Allan - Sorry, I don't understand your suggestion.  How does the contents of /etc/pacman.d/gnupg affect detach-sign operations?

Sorry - I thought this was the pacman-key thread...  I'll stop drinking now...

---

PGP Key: F99FFE0FEAE999BD | I develop pacman - buy me a drink!

Dirk Sohler

Member

From: Hamburg, Germany

Registered: 2009-10-03

Posts: 109

Re: [SOLVED] gnupg 2.1.0-4 upgrade breaks passphrase via STDIN

$ grep loop ~/.gnupg/*.conf
~/.gnupg/gpg-agent.conf:allow-loopback-pinentry
~/.gnupg/gpg.conf:pinentry-mode loopback

Now Gajim and Claws-Mail just fail directly instead of asking for a (non-existent) passphrase and then fail.

---

obrowse – Openbox pipemenu file browser (in AUR, on github)

TE

Member

Registered: 2014-06-21

Posts: 78

Re: [SOLVED] gnupg 2.1.0-4 upgrade breaks passphrase via STDIN

Now Gajim and Claws-Mail just fail directly instead of asking for a (non-existent) passphrase and then fail.

You may with to visit this thread instead, graysky is having app problems with his package signing:

https://bbs.archlinux.org/viewtopic.php?id=190781

It's highly possible what I had to do to get unattended passphrase to work with duplicity/duply is not enough for other apps, graysky has been trying a number of things over in that thread...