Re: Subject: Opening a gpg file format in read and write mode

2015-05-06 Thread Matthew Monaco
On 05/06/2015 05:04 AM, Jamenson Ferreira Espindula de Almeida Melo wrote: > Hi everyone. > > I want to open a file called passwords.txt.gpg and editing it > directly. The mentioned file holds a password list and I prefer not > to decrypt it, that is, I want to read it directly in gpg format > i

Re: Incorrect general key info, for key on Yubikey NEO

2015-05-05 Thread Matthew Monaco
On 05/04/2015 03:05 PM, te...@elde.net wrote: > Hi list, > > I've got what seems to be a not too uncommon setup, with a primary key used > only > for certifying, then separate signature, encryption and authentication keys as > subkeys. I wanted to make new ones, and have the subkeys on a Yubikey

Re: Multiple Smartcards - Signing

2015-05-03 Thread Matthew Monaco
On 05/03/2015 09:29 AM, Werner Koch wrote: > On Sat, 2 May 2015 18:29, m...@monaco.cx said: > >> smartcard. This doesn't appear to be the case, however I may have broken it >> by >> getting fancy: I moved my .key files to -CAPS-8charkeyid-comment >> (e.g. rsa2048-E-DDEC74FE-revoked) and then sym

Re: Multiple Smartcards - Signing

2015-05-03 Thread Matthew Monaco
On 05/03/2015 01:16 PM, Daniel Kahn Gillmor wrote: > On Sun 2015-05-03 06:35:37 -0400, MFPA wrote: >> On Saturday 2 May 2015 at 3:36:47 AM, in >> , Daniel Kahn Gillmor wrote: >> >>> https://bugs.gnupg.org/gnupg/issue1967 >> >> Do you think a notification should be displayed, something like >> "Si

Re: Multiple Smartcards - Signing

2015-05-02 Thread Matthew Monaco
On 05/01/2015 08:36 PM, Daniel Kahn Gillmor wrote: > On Thu 2015-04-30 17:49:28 -0400, Matthew Monaco wrote: >> Why isn't gpg smarter about selecting only from the /available/ keys >> at the time of signing? BTW, I'm using 2.1.3 > > I think this is the crux of your

Multiple Smartcards - Signing

2015-04-30 Thread Matthew Monaco
gHello, I've been happily using a yubikey neo for a while now, but I'm starting to have two problems with it: 1) I mostly use a desktop, but when I'm on my laptop it comes loose too easily 2) On either desktop or laptop, my now ever-curious 1-year-old can easily grab it. In fact, it's one of hi

disconnected binding of sub and master keys

2015-02-25 Thread Matthew Monaco
I think we should easily be able to create subkeys on our day-to-day machine, while maintaining an air-gapped master, without transferring secret material back and forth. This seems possible [1][2] using gpgsplit and possibly some hand editing of hex files. By operating an offline master setup, we

Re: SSH generic socket forwarding for gpg-agent

2015-02-12 Thread Matthew Monaco
On 12/04/2014 01:23 AM, Werner Koch wrote: > On Tue, 11 Nov 2014 18:35, m...@monaco.cx said: >> Does anyone have gpg-agent forwarding working with SSH's recent generic >> socket >> forwarding? Does it still require socat on one end, because I've only been >> able >> to specify a socket path on th

SSH generic socket forwarding for gpg-agent

2014-11-11 Thread Matthew Monaco
Does anyone have gpg-agent forwarding working with SSH's recent generic socket forwarding? Does it still require socat on one end, because I've only been able to specify a socket path on the left-hand side of the forwarding specification. signature.asc Description: OpenPGP digital signature

agent, ssh-support, loading keys

2014-09-27 Thread Matthew Monaco
Hello, I use the agent with ssh-support. I have one problematic scenario. When using ansible (basically a parallel ssh client) and my key hasn't been loaded into the agent already, I am asked by pinentry for my password for every connection. Even if I kill ansible, it seems that the agent/pinentry

gpg-agent, authentication key, and ssh

2013-07-22 Thread Matthew Monaco
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hi, (Sorry if this has been asked/explained but my searches return mostly directions on using ssh-add with gpg-agent.) As I understand it, I can create an authentication subkey and use some utility to convert that to an ssh key. If this conversion

importing new uid (offline master key setup)

2012-05-06 Thread Matthew Monaco
On my running system, I keep the public portions of the master key (certify only) and subkey (combined encrypt and sign). I only keep the private portion of the sub key. Recently, I added a UID to the offline copy of my .gnupg directory. Importing the UID into the pubring was simple enough, but I'