GNU Privacy Guard - Revision history

Leo: changed email address to example.com

2023-07-27T20:34:48Z

changed email address to example.com

← Older revision		Revision as of 20:34, 27 July 2023
Line 28:		Line 28:
	----------------------------		----------------------------
	pub 2048R/28AF4724 2015-11-23		pub 2048R/28AF4724 2015-11-23
	uid Leo Leung <leo@~~steamr~~.com>		uid Leo Leung <leo@example.com>
	}}		}}

Line 36:		Line 36:
	{{highlight\|lang=terminal\|code=		{{highlight\|lang=terminal\|code=
	# gpg --delete-secret-keys 28AF4724		# gpg --delete-secret-keys 28AF4724
	sec 2048R/28AF4724 2015-11-23 Leo Leung <leo@~~steamr~~.com>		sec 2048R/28AF4724 2015-11-23 Leo Leung <leo@example.com>

	Delete this key from the keyring? (y/N) y		Delete this key from the keyring? (y/N) y
Line 42:		Line 42:

	# gpg --delete-keys 28AF4724		# gpg --delete-keys 28AF4724
	pub 2048R/28AF4724 2015-11-23 Leo Leung <leo@~~steamr~~.com>		pub 2048R/28AF4724 2015-11-23 Leo Leung <leo@example.com>

	Delete this key from the keyring? (y/N) y		Delete this key from the keyring? (y/N) y
Line 65:		Line 65:

	===Exporting Public Key===		===Exporting Public Key===
	gpg --armor --export leo@~~steamr~~.com --output leo.steamr.pub		gpg --armor --export leo@example.com --output leo.steamr.pub

Leo at 00:48, 8 November 2021

2021-11-08T00:48:16Z

← Older revision		Revision as of 00:48, 8 November 2021
Line 1:		Line 1:
	GNU Privacy Guard (GPG or GnuPG) is a open source replacement for the original Pretty Good Privacy software suite. It is capable of encrypt and decrypt data.		GNU Privacy Guard (GPG or GnuPG) is a open source replacement for the original Pretty Good Privacy software suite. It is capable of encrypt and decrypt data.

	== Key Management ==		==Key Management==

	=== Creating a New Key ===		===Creating a New Key===
	To generate a new key, run {{code\| gpg --gen-key}}		To generate a new key, run {{code\| gpg --gen-key}}
	{{highlight\|lang=terminal\|code=		{{highlight\|lang=terminal\|code=
Line 20:		Line 20:
	Your default key can be set by setting the {{code\|GPGKEY}} environment variable.		Your default key can be set by setting the {{code\|GPGKEY}} environment variable.

	=== Listing Keys ===		===Listing Keys===
	{{code\|gpg --list-keys}}		{{code\|gpg --list-keys}}

Line 31:		Line 31:
	}}		}}

	=== Deleting Keys ===		===Deleting Keys===
	Delete the private key using {{code\|gpg --delete-secret-keys}}, and the public key using {{code\|gpg --delete-keys}}.		Delete the private key using {{code\|gpg --delete-secret-keys}}, and the public key using {{code\|gpg --delete-keys}}.

Line 47:		Line 47:
	}}		}}

	=== Adding another UID ===		===Adding another UID===
	Edit the key using {{code\|gpg --edit-key}} and run then {{code\|adduid}} command. Exit using the {{code\|save}} command.		Edit the key using {{code\|gpg --edit-key}} and run then {{code\|adduid}} command. Exit using the {{code\|save}} command.

	=== Sending a key to a key server ===		===Sending a key to a key server===
	{{code\|gpg --keyserver pgp.mit.edu --send-key ###}}		{{code\|gpg --keyserver pgp.mit.edu --send-key ###}}

	=== Changing Private Key Passphrase ===		===Changing Private Key Passphrase===
	{{highlight\|lang=text\|code=		{{highlight\|lang=text\|code=
	$ gpg --edit-key [keyID]		$ gpg --edit-key [keyID]
Line 64:		Line 64:
	}}		}}

	=== Exporting Public Key ===		===Exporting Public Key===
	gpg --armor --export leo@steamr.com --output leo.steamr.pub		gpg --armor --export leo@steamr.com --output leo.steamr.pub


	== Basic Usage ==		==Basic Usage==
	=== Encrypting Files ===		===Encrypting Files===

	Encrypt a file with a passphrase:		Encrypt a file with a passphrase:
Line 86:		Line 86:
	}}		}}

	=== Signing Files ===		===Signing Files===
	There are a few types of signatures:		There are a few types of signatures:
	==== Binary Signature ====		====Binary Signature====
	The input file is compressed and its binary data is signed. GPG places the signature and compressed file contents into a {{code\|.gpg}} file.		The input file is compressed and its binary data is signed. GPG places the signature and compressed file contents into a {{code\|.gpg}} file.

	{\| class="wikitable"		{\| class="wikitable"
	! Signing		!Signing
	\| {{code\|gpg --clearsign test.txt}}		\|{{code\|gpg --clearsign test.txt}}
	\|-		\|-
	! Verifying		!Verifying
	\| {{code\|gpg --verify test.txt.gpg}}		\|{{code\|gpg --verify test.txt.gpg}}
	\|-		\|-
	! Retrieving		!Retrieving
	\| {{code\|gpg -d -o test.txt test.txt.gpg}}		\|{{code\|gpg -d -o test.txt test.txt.gpg}}
	\|}		\|}

	==== Clear Signature ====		====Clear Signature====
	The contents of the input file is signed in clear text. The signature and the contents of the input file are placed in clear text in a {{code\|.asc}} file. This file can be viewed with any text editor and the signature and contents are fully visible.		The contents of the input file is signed in clear text. The signature and the contents of the input file are placed in clear text in a {{code\|.asc}} file. This file can be viewed with any text editor and the signature and contents are fully visible.

	{\| class="wikitable"		{\| class="wikitable"
	! Signing		!Signing
	\| {{code\|gpg --clearsign test.txt}}		\|{{code\|gpg --clearsign test.txt}}
	\|-		\|-
	! Verifying		!Verifying
	\| {{code\|gpg --verify test.txt.asc}}		\|{{code\|gpg --verify test.txt.asc}}
	\|-		\|-
	! Retrieving		!Retrieving
	\| {{code\|gpg -d -o test.txt test.txt.asc}}		\|{{code\|gpg -d -o test.txt test.txt.asc}}
	\|}		\|}

	==== Detached Signature ====		====Detached Signature====
	A signature for the input file is created and stored in a {{code\|.sig}} file. Typically, the signature file is bundled with the input file with the same name except with the {{code\|.sig}} file extension.		A signature for the input file is created and stored in a {{code\|.sig}} file. Typically, the signature file is bundled with the input file with the same name except with the {{code\|.sig}} file extension.

	{\| class="wikitable"		{\| class="wikitable"
	! Signing		!Signing
	\| {{code\|gpg --detach-sign test.txt}}		\|{{code\|gpg --detach-sign test.txt}}
	\|-		\|-
	! Verifying		!Verifying
	\| {{code\|gpg --verify test.txt.sig test.txt}}		\|{{code\|gpg --verify test.txt.sig test.txt}}
	\|}		\|}

	== Automating Encrypted Backups using Asymmetric Keys ==		== Tasks ==

			===Automating Encrypted Backups using Asymmetric Keys===

	{{highlight\|lang=bash\|code=		{{highlight\|lang=bash\|code=
Line 166:		Line 168:
	}}		}}

	== ~~See Also~~ ==		=== Verifying file signature ===
	* https://www.~~gnupg~~.~~org~~/~~documentation/manuals/gnupg/Operational~~-~~GPG~~-~~Commands~~.~~html~~		Some downloads include a <code>signature.txt.gpg</code> file. Decrypt the file first (which also shows whether its signature is valid)
	* https://help.~~ubuntu.com/community/GnuPrivacyGuardHowto~~		{{Highlight
			\| code = $ gpg --verify CHECKSUMS.TXT.gpg CHECKSUMS.TXT

			## Verify the files with sha256sum
			$ sha256sum -c --ignore-missing CHECKSUMS.TXT

			## Or sum the file in question and compare it with the checksums manually
			$ sha256sum [filename]
			\| lang = terminal
			}}


			==See Also==

			*https://www.gnupg.org/documentation/manuals/gnupg/Operational-GPG-Commands.html
			*https://help.ubuntu.com/community/GnuPrivacyGuardHowto

	[[Category:Todo]]		[[Category:Todo]]
	{{Navbox Linux}}[[Category:Linux]]		{{Navbox Linux}}
			[[Category:Linux]]
	[[Category:LinuxUtilities]]		[[Category:LinuxUtilities]]

Leo: /* Basic Usage */

2020-05-06T18:07:36Z

Basic Usage

@@ Line 69: / Line 69: @@
 == Basic Usage ==
 === Signing Files ===
 There are a few types of signatures:

Leo: Text replacement - "Category:Linux{{Navbox Linux}}" to "{{Navbox Linux}}Category:Linux"

2019-09-01T06:22:44Z

Text replacement - "Category:Linux{{Navbox Linux}}" to "{{Navbox Linux}}Category:Linux"

← Older revision		Revision as of 06:22, 1 September 2019
Line 155:		Line 155:

	[[Category:Todo]]		[[Category:Todo]]
	[[Category:Linux]]~~{{Navbox Linux}}~~		{{Navbox Linux}}[[Category:Linux]]
	[[Category:LinuxUtilities]]		[[Category:LinuxUtilities]]

Leo: Text replacement - "{{Navbox Linux}}{{Navbox Linux}}" to "{{Navbox Linux}}"

2019-09-01T05:10:16Z

Text replacement - "{{Navbox Linux}}{{Navbox Linux}}" to "{{Navbox Linux}}"

← Older revision		Revision as of 05:10, 1 September 2019
Line 155:		Line 155:

	[[Category:Todo]]		[[Category:Todo]]
	[[Category:Linux]]~~{{Navbox Linux}}~~{{Navbox Linux}}		[[Category:Linux]]{{Navbox Linux}}
	[[Category:LinuxUtilities]]		[[Category:LinuxUtilities]]

Leo: Text replacement - "Category:Linux" to "Category:Linux{{Navbox Linux}}"

2019-09-01T05:08:47Z

Text replacement - "Category:Linux" to "Category:Linux{{Navbox Linux}}"

← Older revision		Revision as of 05:08, 1 September 2019
Line 155:		Line 155:

	[[Category:Todo]]		[[Category:Todo]]
	[[Category:Linux]]{{Navbox Linux}}		[[Category:Linux]]{{Navbox Linux}}{{Navbox Linux}}
	[[Category:LinuxUtilities]]		[[Category:LinuxUtilities]]

Leo: Text replacement - " {{Navbox Linux}}" to ""

2019-09-01T04:56:02Z

Text replacement - " {{Navbox Linux}}" to ""

← Older revision		Revision as of 04:56, 1 September 2019
Line 157:		Line 157:
	[[Category:Linux]]{{Navbox Linux}}		[[Category:Linux]]{{Navbox Linux}}
	[[Category:LinuxUtilities]]		[[Category:LinuxUtilities]]
	~~{{Navbox Linux}}~~

Leo: Text replacement - "Category:Linux " to "Category:Linux{{Navbox Linux}} "

2019-09-01T03:51:56Z

Text replacement - "Category:Linux " to "Category:Linux{{Navbox Linux}} "

← Older revision		Revision as of 03:51, 1 September 2019
Line 155:		Line 155:

	[[Category:Todo]]		[[Category:Todo]]
	[[Category:Linux]]		[[Category:Linux]]{{Navbox Linux}}
	[[Category:LinuxUtilities]]		[[Category:LinuxUtilities]]
	{{Navbox Linux}}		{{Navbox Linux}}

Leo: syntaxhighlight

2017-07-05T20:51:41Z

syntaxhighlight

← Older revision		Revision as of 20:51, 5 July 2017
Line 5:		Line 5:
	=== Creating a New Key ===		=== Creating a New Key ===
	To generate a new key, run {{code\| gpg --gen-key}}		To generate a new key, run {{code\| gpg --gen-key}}
	{{highlight\|lang=~~text~~\|code=		{{highlight\|lang=terminal\|code=
	# gpg --gen-key		# gpg --gen-key
	gpg (GnuPG) 1.4.19; Copyright (C) 2015 Free Software Foundation, Inc.		gpg (GnuPG) 1.4.19; Copyright (C) 2015 Free Software Foundation, Inc.
Line 112:		Line 112:
	== Automating Encrypted Backups using Asymmetric Keys ==		== Automating Encrypted Backups using Asymmetric Keys ==

	#!/bin/sh		{{highlight\|lang=bash\|code=
			#!/bin/sh
	HOSTNAME=`hostname`
	DATE=`date +%Y-%m-%d`		HOSTNAME=`hostname`
			DATE=`date +%Y-%m-%d`
	# Get the public key to encrypt with
	wget -O - http://leo.home.steamr.com/public/backup_key.pub \| gpg --import		# Get the public key to encrypt with
			wget -O - http://leo.home.steamr.com/public/backup_key.pub {{!}} gpg --import
	# Create archive, pipe to gpg to encrypt, then send to freebsd
	tar -czpf - \		# Create archive, pipe to gpg to encrypt, then send to freebsd
	/usr/share/sickbeard/ \		tar -czpf - \
	/etc/init.d/sickbeard \		/usr/share/sickbeard/ \
	\		/etc/init.d/sickbeard \
	/usr/share/SABnzbd/ \		\
	/etc/init.d/SABnzbd \		/usr/share/SABnzbd/ \
	\		/etc/init.d/SABnzbd \
	/home/rt \		\
	/var/www/html/rutorrent \		/home/rt \
	/usr/lib64/httpd/modules/mod_scgi.so \		/var/www/html/rutorrent \
	/etc/httpd/conf.d \		/usr/lib64/httpd/modules/mod_scgi.so \
	/etc/httpd/conf/httpd.conf \		/etc/httpd/conf.d \
	\		/etc/httpd/conf/httpd.conf \
	/etc/fstab \		\
	/etc/passwd \		/etc/fstab \
	/etc/group \		/etc/passwd \
	/etc/shadow \		/etc/group \
	\| gpg --encrypt --yes --no-tty --trust-model always --recipient leo@steamr.com \		/etc/shadow \
	\| ssh backup@freebsd "cd /storage/backups/archived/sickbeard; cat - > $HOSTNAME.$DATE.tar.gz.gpg"		{{!}} gpg --encrypt --yes --no-tty --trust-model always --recipient leo@steamr.com \
			{{!}} ssh backup@freebsd "cd /storage/backups/archived/sickbeard; cat - > $HOSTNAME.$DATE.tar.gz.gpg"
	# Requires mailx, with smtp=smtp://mail.home.steamr.com set in /etc/mail.rc
	echo -e "Backup Completed on `date`.\nUptime: `uptime`\n\nProcesses:\n`ps -eaf`" \| mail -s "Backup Completed on `hostname`" "leo@home.steamr.com"		# Requires mailx, with smtp=smtp://mail.home.steamr.com set in /etc/mail.rc
			echo -e "Backup Completed on `date`.\nUptime: `uptime`\n\nProcesses:\n`ps -eaf`" {{!}} mail -s "Backup Completed on `hostname`" "leo@home.steamr.com"
	# delete the public backup key
	gpg --batch --yes --delete-key leo@steamr.com		# delete the public backup key
			gpg --batch --yes --delete-key leo@steamr.com
			}}

	== See Also ==		== See Also ==

Leo: Text replacement - "{{highlight|lang=bash" to "{{highlight|lang=terminal"

2017-02-24T04:21:06Z

Text replacement - "{{highlight|lang=bash" to "{{highlight|lang=terminal"

← Older revision		Revision as of 04:21, 24 February 2017
Line 23:		Line 23:
	{{code\|gpg --list-keys}}		{{code\|gpg --list-keys}}

	{{highlight\|lang=~~bash~~\|code=		{{highlight\|lang=terminal\|code=
	# gpg --list-keys		# gpg --list-keys
	/home/leo/.gnupg/pubring.gpg		/home/leo/.gnupg/pubring.gpg
Line 34:		Line 34:
	Delete the private key using {{code\|gpg --delete-secret-keys}}, and the public key using {{code\|gpg --delete-keys}}.		Delete the private key using {{code\|gpg --delete-secret-keys}}, and the public key using {{code\|gpg --delete-keys}}.

	{{highlight\|lang=~~bash~~\|code=		{{highlight\|lang=terminal\|code=
	# gpg --delete-secret-keys 28AF4724		# gpg --delete-secret-keys 28AF4724
	sec 2048R/28AF4724 2015-11-23 Leo Leung <leo@steamr.com>		sec 2048R/28AF4724 2015-11-23 Leo Leung <leo@steamr.com>