GPG - Revision history

Kenneth: /* Export Key */

2025-10-20T21:37:33Z

Export Key

← Older revision		Revision as of 21:37, 20 October 2025
Line 42:		Line 42:
	== Export Key ==		== Export Key ==

	~~Exoprt~~ public key:		Export public key:
	gpg --armor --export [long_key_id] > public.gpg.asc		gpg --armor --export [long_key_id] > public.gpg.asc
	gpg --armor --output public.gpg.asc --export [long_key_id]		gpg --armor --output public.gpg.asc --export [long_key_id]
Line 54:		Line 54:
	Note: <s>not sure why but the --output paramter has to come before the --export paramter??</s> All paramters just need to come before the [long_key_id] at the end. Example:		Note: <s>not sure why but the --output paramter has to come before the --export paramter??</s> All paramters just need to come before the [long_key_id] at the end. Example:
	gpg -a --export -o public.gpg.asc [long_key_id]		gpg -a --export -o public.gpg.asc [long_key_id]

			=== Show Exported Key ===

			Trying to figure out what key is in a key file?
			gpg --show-keys < public.gpg.asc

	== Default Key ==		== Default Key ==

2025-06-09T21:51:09Z

Sign Commit

← Older revision		Revision as of 21:51, 9 June 2025
Line 219:		Line 219:
	To have Git use GPG with a password:		To have Git use GPG with a password:
	export GPG_TTY=$(tty)		export GPG_TTY=$(tty)

			This will prevent this error when signing:
			error: gpg failed to sign the data
			fatal: failed to write commit object

			# or when using gpg directly
			gpg: signing failed: Inappropriate ioctl for device
			gpg: [stdin]: clear-sign failed: Inappropriate ioctl for device

	Have gpg-agent cache the password.		Have gpg-agent cache the password.
Line 224:		Line 232:
	To force test sign from command line, before using an app like Visual Code:		To force test sign from command line, before using an app like Visual Code:
	echo "test" \| gpg --clearsign		echo "test" \| gpg --clearsign

			alias gitready='echo '\'''\'' \| gpg --clearsign'

	ref: [https://docs.github.com/en/authentication/managing-commit-signature-verification/signing-commits]		ref: [https://docs.github.com/en/authentication/managing-commit-signature-verification/signing-commits]

2024-12-05T21:51:20Z

Default Key

← Older revision		Revision as of 21:51, 5 December 2024
Line 71:		Line 71:
	Cache password in gpg-agent:		Cache password in gpg-agent:
	echo "" \| gpg --clearsign		echo "" \| gpg --clearsign

			~/.bashrc
			alias gpgpass="echo '' \| gpg --clearsign"

	== gpg-agent default timeout ==		== gpg-agent default timeout ==

2024-12-05T21:48:53Z

Default Key

← Older revision		Revision as of 21:48, 5 December 2024
Line 69:		Line 69:
	echo 'default-key:0:"xxxxxxxxxxxxxxxxxxxx' \| gpgconf --change-options gpg		echo 'default-key:0:"xxxxxxxxxxxxxxxxxxxx' \| gpgconf --change-options gpg

			Cache password in gpg-agent:
	echo "" \| gpg --clearsign		echo "" \| gpg --clearsign

2024-11-27T09:09:34Z

Default Key

← Older revision		Revision as of 09:09, 27 November 2024
Line 68:		Line 68:

	echo 'default-key:0:"xxxxxxxxxxxxxxxxxxxx' \| gpgconf --change-options gpg		echo 'default-key:0:"xxxxxxxxxxxxxxxxxxxx' \| gpgconf --change-options gpg

			echo "" \| gpg --clearsign

			== gpg-agent default timeout ==

			Change to 8 hours <ref>https://stackoverflow.com/questions/61067967/git-gpg-failed-to-sign-the-data-in-visual-studio-code</ref>
			mkdir -p ~/.gnupg
			echo "default-cache-ttl 28800" >> ~/.gnupg/gpg-agent.conf

			echo "default-cache-ttl:0:28800" \| gpgconf --change-options gpg-agent

			echo "default-cache-ttl 28800"gpgconf --list-options gpg-agent
			default-cache-ttl:24:0:expire cached PINs after N seconds:3:3:N:600::28800
			default-cache-ttl-ssh:24:1:expire SSH keys after N seconds:3:3:N:1800::

	== Encrypt Message ==		== Encrypt Message ==

2024-11-27T08:59:58Z

GitHub GPG

← Older revision		Revision as of 08:59, 27 November 2024
Line 199:		Line 199:
	signingkey = B96CBB1FCF115C2XXXXXXXXXXXXXXXXXXXXX		signingkey = B96CBB1FCF115C2XXXXXXXXXXXXXXXXXXXXX

			To have Git use GPG with a password:
			export GPG_TTY=$(tty)

			Have gpg-agent cache the password.

			To force test sign from command line, before using an app like Visual Code:
			echo "test" \| gpg --clearsign

	ref: [https://docs.github.com/en/authentication/managing-commit-signature-verification/signing-commits]		ref: [https://docs.github.com/en/authentication/managing-commit-signature-verification/signing-commits]

2024-11-27T08:57:10Z

Default Key

← Older revision		Revision as of 08:57, 27 November 2024
Line 62:		Line 62:
	default-key <key-fpr>		default-key <key-fpr>
	replacing <key-fpr> with the id or fingerprint of the key you want to use by default. <ref>https://unix.stackexchange.com/questions/339077/set-default-key-in-gpg-for-signing</ref>		replacing <key-fpr> with the id or fingerprint of the key you want to use by default. <ref>https://unix.stackexchange.com/questions/339077/set-default-key-in-gpg-for-signing</ref>

			--- or from the command line <ref>https://unix.stackexchange.com/questions/339077/set-default-key-in-gpg-for-signing</ref>

			gpg --list-signatures

			echo 'default-key:0:"xxxxxxxxxxxxxxxxxxxx' \| gpgconf --change-options gpg

	== Encrypt Message ==		== Encrypt Message ==

2024-06-25T02:40:50Z

Remove Passphrase

← Older revision		Revision as of 02:40, 25 June 2024
Line 255:		Line 255:

	ref: [https://unix.stackexchange.com/questions/407062/gpg-list-keys-command-outputs-uid-unknown-after-importing-private-key-onto]		ref: [https://unix.stackexchange.com/questions/407062/gpg-list-keys-command-outputs-uid-unknown-after-importing-private-key-onto]

			== Delete Key ==

			Delete secret key first:
			gpg --delete-secret-key [LONGID]
			gpg --delete-key [LONGID]

	== Remove Passphrase ==		== Remove Passphrase ==

2024-06-10T21:02:47Z

Generate GpG Key

← Older revision		Revision as of 21:02, 10 June 2024
Line 139:		Line 139:
	https://docs.github.com/en/authentication/managing-commit-signature-verification/generating-a-new-gpg-key		https://docs.github.com/en/authentication/managing-commit-signature-verification/generating-a-new-gpg-key

	=== Generate GpG Key ===		=== Create Generate GpG Key ===

	gpg --full-generate-key		gpg --full-generate-key

2024-05-24T20:46:24Z

Export Key

@@ Line 154: / Line 154: @@
 Export private key:
   gpg --armor --output private.gpg.asc --export-secret-key [long_key_id]
 === Sign Commit ===