Contents
How to make GPG prompt for passphrase work?
The stty makes sure your password is not echoed as you enter it. A tad smoother than fiddling with configs if all you want is a quicky on say a desktop workstation you ssh’d into. You will need, though, pinentry sudo apt install pinentry-curses or possibly sudo apt install pinentry
What are the standard file descriptors in GnuPG?
The standard file descriptors are STDIN (0), STDOUT (1) and STDERR (2). For the context of this question, you would normally only be concerned about STDIN (0). You didn’t specify where you want the passphrase to come from, so I will demonstrate the usage of STDIN (standard in) in a variety of ways.
How to disable the gpg agent in Linux?
Disable the gpg-agent; you can do that for a single gpg invocation by unsetting the environment variable GPG_AGENT_INFO like GPG_AGENT_INFO=”” gpg …. gpg used to have a –no-use-agent option, but this has been marked deprecated and has no functionality in recent gpg version.
Are there any security concerns with X11 forwarding?
With X11 forwarding, the server is likely to gain shell access to the client. In an X11 session, the server can send X11 commands back to the client. X11 was not designed with security in mind, it was designed with the idea that all programs that you’re displaying are run by you and hence trusted anyway.
Can a pinentry prompt you to enter a PGP password?
To clarify, if you WANT pinentry to prompt you to enter your password anytime you’re doing something that you want to verify with your PGP keys, make sure you don’t have the options to remember your password enabled AND make sure you delete any PGP passwords you might have stored in macOS keychain.
How to make GPG prompt use the CLI even when invoked?
How to make it use the CLI even when invoked by a regular user. version:GnuPG 1.4.12 This kind of password prompt is not done by gpg itself, but by the gpg-agent. You can configure your gpg-agent which pinentry program should be used.