Using gpg-agent for git credentials?

2016-02-20 Thread taltman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 Hello GPG experts, I just recently ran into a git-based service that required password authentication, and didn't support public-key authentication. They suggested that I could use git credentials for accessing the service, and for providing option

Re: Using gpg-agent for git credentials?

2016-02-20 Thread Eugene Stanley
On 20/02/16 07:15, taltman wrote: > Hello GPG experts, > > I just recently ran into a git-based service that required password > authentication, and didn't support public-key authentication. > > They suggested that I could use git credentials for accessing the > service, and for providing options f

Re: How to configure Smartcard without 'toggle'

2016-02-20 Thread Damien Goutte-Gattat
On 02/19/2016 06:04 PM, Nick Zbinden wrote: My problem is that I can not select the private keys, because I can not use 'toggle'. You do not need the 'toggle' command to select the private keys. Using the 'key' command alone is enough: $ gpg2 --edit-key alice Secret key is available.

Re: Use of --passphrase-file

2016-02-20 Thread NdK
Il 19/02/2016 15:17, Harman, Michael ha scritto: > Thanks Brian. I think I tried this but I couldn’t figure out how to > completely hide the passphrase so no one could get to it. Maybe I was > using it incorrectly. Since this is an unattended operation that runs > day and night, I wanted to secure

Re: When to use GPG flags

2016-02-20 Thread Peter Lebbing
On 20/02/16 01:09, Eric Pruitt wrote: > For example, if I pipe a clearsigned message into GPG using "gpg > --decrypt", GPG verifies the clearsigned signature and strips the > "---BEGIN PGP" and "---END PGP..." blocks. For programmatic use of GnuPG, you should really be using a library, prefera

Re: Using gpg-agent for git credentials?

2016-02-20 Thread Peter Lebbing
On 20/02/16 07:15, taltman wrote: > Seems like credential management would be better done using gpg-agent. You can use the agent for inquiry and /caching/ of your passphrases, but not for /storage/. The difference is in the lifetime: once gpg-agent exits, any cached passphrases are forgotten. It c

Re: When to use GPG flags

2016-02-20 Thread Eric Pruitt
On Sat, Feb 20, 2016 at 12:28:44PM +0100, Peter Lebbing wrote: > For programmatic use of GnuPG, you should really be using a library, > preferably GPGME. That is the supported way of using GnuPG from another > program. Calling the gpg command line program directly is for use by > humans on a comman

Re: When to use GPG flags

2016-02-20 Thread Peter Lebbing
On 20/02/16 18:14, Eric Pruitt wrote: > Regardless of > how I ultimately choose to implement PGP support in my mail client, I > would still like to have the questions I asked addressed to understand > how GPG handles command line flags. Fine by me. The difference is that --verify never produces a

Re: When to use GPG flags

2016-02-20 Thread Eric Pruitt
On Sat, Feb 20, 2016 at 06:48:21PM +0100, Peter Lebbing wrote: > So --decrypt is: gimme the contents. --verify is: check the validity, > but don't ever produce any data. > > But since you ultimately need to choose a reasonably short name for the > option, they're not called --decrypt-verify-or-deco

symmetric encryption and gpg-agent

2016-02-20 Thread Janna Martl
Currently, I'm using gpg to store my email password encrypted on disk, and have configured the programs I use to access the email server (offlineimap and msmtp) to ask gpg-agent for that password. I've set default-cache-ttl in gpg-agent.conf to a very high number, so I enter the passphrase once whe

What is an appropriate link for IceDove?...

2016-02-20 Thread Don Warner Saklad
For "#1 GET THE PIECES" at https://emailselfdefense.fsf.org/en/ what is an appropriate link for IceDove?... >"Before configuring GnuPG though, you'll need the IceDove desktop email >program installed on your computer." ___ Gnupg-users mailing list Gn

Re: What is an appropriate link for IceDove?...

2016-02-20 Thread B
Hej Don, Icedove is the derivate from Thunderbird in Debian, forked because of licence inconsistance. So, if you're using Debian/GNU Linux, install it from repositories, otherwise install Thunderbird. B. Am 20.02.2016 um 23:57 schrieb Don Warner Saklad: > For "#1 GET THE PIECES" at https://emai

Re: What is an appropriate link for IceDove?...

2016-02-20 Thread Robert J. Hansen
>> "Before configuring GnuPG though, you'll need the IceDove desktop email >> program installed on your computer." http://www.getthunderbird.com Mozilla's Thunderbird email client is free and open-source software. However, Debian requires that software also be free of trademarks, and Mozilla and

Re: symmetric encryption and gpg-agent

2016-02-20 Thread Doug Barton
On 02/19/2016 12:59 PM, Janna Martl wrote: So, is there a "good" way to get what I want: my email password stored in a way that I only have to enter a passphrase once, and my master password file stored in a way that I have to enter the passphrase every time I want to look at the file? Rather