Arch Linux

bender02

Member

From: UK

Registered: 2007-02-04

Posts: 1,329

[SOLVED] a problem with gpg-agent and ssh keys

I'm baffled by a strangle problem:
My setup is as follows: I use gpg-agent with --enable-ssh-support, so that my ssh keys are handled by it. All was fine (when I ssh'ed to another machine, a pinentry window popped up, asked for a password, and if I entered the correct one, gpg-agent would decrypt its copy of my private ssh key and use it for identification). But: I needed to change my ssh key, and so I generated a new one. Next, I ssh-add'ed it to gpg-agent (one password to decrypt the private key, then twice another password for gpg-agent). I uploaded the public key to a server. The setup should be complete.

The problem is that when I ssh to a machine, a pinentry window comes up, but it does not accept my password (the one that I entered twice when ssh-add'ing the key). I tried adding with various different passwords (always deleting ~/.gnupg/private-keys-v1.d/*, since 'ssh-add -d ~/.ssh/id_rsa.pub' would not work for some reason - it would not make gpg-agent forget the key), different pinentry programs ( -qt4, -gtk-2, -curses), and still the same problems. Pinentry itself seems to work fine, since if I enter two different things when it asks for a new passphrase for the key, it detects that there's a problem.

So, can anyone help? What could I try (please don't post just to say that I could/should use ssh-agent, or keychain, or anything else. I have used various things, and I like this setup the most. It worked before, and I would like to find out why it stopped working and how to get it back to speed.)

Thanks.

Last edited by bender02 (2010-02-15 09:52:54)

b52

Member

From: Germany

Registered: 2009-03-20

Posts: 49

Website

Re: [SOLVED] a problem with gpg-agent and ssh keys

Thats a known bug with the new gpg version.
http://lists.gnupg.org/pipermail/gnupg- … 38045.html

You could use an older version of gpg or use a development version.

---

srsly?

bender02

Member

From: UK

Registered: 2007-02-04

Posts: 1,329

Re: [SOLVED] a problem with gpg-agent and ssh keys

Great, thanks!
I patched the gnupg-2.0.14 with the patch that was supplied along with that e-mail you pointed me to, and it works fine now.