Package: gnupg-agent
Version: 2.0.13-1
Severity: normal

I'm trying to change my running gpg-agent to a tty when logging in
remotely via ssh.

However I haven't found a way to stop gpg-agent from asking for a
passphrase on the original X display.

This is my ~/.gnupg/gpg-agent.conf:
,----[ gpg-agent.conf ]
  default-cache-ttl 3600
  allow-mark-trusted
  enable-ssh-support
  allow-preset-passphrase
`----

On the remote shell I try the following:

,----
  frie...@abrasax:~> echo $DISPLAY

  frie...@abrasax:~> . .gnupg/gpg-agent-info-abrasax
  frie...@abrasax:~> export GPG_AGENT_INFO SSH_AUTH_SOCK SSH_AGENT_PID
  frie...@abrasax:~> export GPG_TTY=`tty`
  frie...@abrasax:~> tty
  /dev/pts/10
  frie...@abrasax:~> gpg-agent --daemon --verbose zsh
  gpg-agent[23353]: listening on socket `/tmp/gpg-CDeOSx/S.gpg-agent'
  gpg-agent[23353]: listening on socket `/tmp/gpg-0ZH7Qv/S.gpg-agent.ssh'
  gpg-agent[23354]: gpg-agent (GnuPG) 2.0.13 started
  frie...@abrasax:~> export LANG=C
  frie...@abrasax:~> export LC_ALL=C
  frie...@abrasax:~> gpg --sign foo

  Sie benötigen eine Passphrase, um den geheimen Schlüssel zu entsperren.
  Benutzer: <redacted>
`----

That popped up an X dialog, although no display was set. I pressed
"cancel".

,----
  gpg: Abbruch durch Benutzer
  gpg: no default secret key: Falsche Passphrase
  gpg: signing failed: Falsche Passphrase
  frie...@abrasax:~> echo $GPG_TTY
  /dev/pts/10
  frie...@abrasax:~> tty
  /dev/pts/10
  frie...@abrasax:~> echo UPDATESTARTUPTTY | gpg-connect-agent
  gpg-agent[23466]: handler 0x261d530 for fd 7 started
  OK
  gpg-agent[23466]: handler 0x261d530 for fd 7 terminated
  frie...@abrasax:~> gpg --sign foo

  Sie benötigen eine Passphrase, um den geheimen Schlüssel zu entsperren.
  Benutzer: <redacted>

  gpg: Abbruch durch Benutzer
  gpg: no default secret key: Falsche Passphrase
  gpg: signing failed: Falsche Passphrase

  frie...@abrasax:~> exit
  frie...@abrasax:~> piogpg-agent[23466]: parent process died - shutting down
  gpg-agent[23466]: gpg-agent (GnuPG) 2.0.13 stopped
  n
  frie...@abrasax:~> pinentry
  OK Your orders please
  GETPIN
  pinentry-gtk2: no LC_CTYPE known - assuming UTF-8
  D foo
  OK
`----

Pinentry failed to find an X display and used pinentry-curses.

Also LC_TYPE and LANG are still german, although I tried to get
english messages for this bug report.

,----
  frie...@abrasax:~> gpg-connect-agent
  > GET_CONFIRMATION X X X X
  OK
  > %
`----

That popped up an X dialog

However when using gpg-agent --daemon zsh with ssh, it is possible to
get the curses fallback dialog, but gpg will always use the old X
display.


-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable'), (1, 
'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.30-2-amd64 (SMP w/1 CPU core)
Locale: LANG=de_DE.utf8, LC_CTYPE=de_DE.utf8 (charmap=UTF-8) (ignored: LC_ALL 
set to de_DE.utf8)
Shell: /bin/sh linked to /bin/bash

Versions of packages gnupg-agent depends on:
ii  libc6                         2.10.1-7   GNU C Library: Shared libraries
ii  libgcrypt11                   1.4.4-5    LGPL Crypto library - runtime libr
ii  libgpg-error0                 1.6-1      library for common error values an
ii  libpth20                      2.0.7-14   The GNU Portable Threads
ii  libreadline5                  5.2-7      GNU readline and history libraries
ii  pinentry-curses [pinentry]    0.7.6-1    curses-based PIN or pass-phrase en
ii  pinentry-gtk2 [pinentry]      0.7.6-1    GTK+-2-based PIN or pass-phrase en

Versions of packages gnupg-agent recommends:
ii  gnupg                         1.4.10-2   GNU privacy guard - a free PGP rep

gnupg-agent suggests no packages.

-- no debconf information



--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to