Using epg with gpg-agent

Using epg with gpg-agent

[Richard Stallman]

[[[ To any NSA and FBI agents reading my email: please consider    ]]]
[[[ whether defending the US Constitution against all enemies,     ]]]
[[[ foreign or domestic, requires you to follow Snowden's example. ]]]

Does anyone know how to make the Emacs encryption commands such as
epa-decrypt-region work with gpg-agent on a text console?
If I start gpg-agent in the usual way before running Emacs,
then when I try to decrypt, gpg-agent and Emacs both try to
read from the terminal so the passphrase always gets garbled.
-- 
Dr Richard Stallman
President, Free Software Foundation (https://gnu.org, https://fsf.org)
Internet Hall-of-Famer (https://internethalloffame.org)

Re: Using epg with gpg-agent

[Matthew Carter]

Richard Stallman <rms@gnu.org> writes:

> [[[ To any NSA and FBI agents reading my email: please consider    ]]]
> [[[ whether defending the US Constitution against all enemies,     ]]]
> [[[ foreign or domestic, requires you to follow Snowden's example. ]]]
>
> Does anyone know how to make the Emacs encryption commands such as
> epa-decrypt-region work with gpg-agent on a text console?
> If I start gpg-agent in the usual way before running Emacs,
> then when I try to decrypt, gpg-agent and Emacs both try to
> read from the terminal so the passphrase always gets garbled.

I use a setup where all my Emacs based decryption (epa) commands are
from the (text/tty Emacs) password input prompt in Emacs, and sent to
gpg-agent.  This works for me over SSH, tty1-6, or in an X session
terminal emulator (no call out to the GUI password input prompt).

More recent versions of Emacs/gpg-agent required me to add the loopback
option, as well as the Emacs options - a couple years ago it worked with
just the allow-emacs-pinentry setting and nothing else:

My relevant settings are as follows:

In ~/.gnupg/gpg-agent.conf:

allow-emacs-pinentry
allow-loopback-pinentry

On the Emacs side:

(setq epa-pinentry-mode 'loopback)
(pinentry-start) ; This was disabled recently in Emacs 26+ and has to be
explicitly called

I know I ran into many garbled text issues when trying to combine
ncurses input on the gpg-agent with Emacs functions.

-- 
Matthew Carter (m@ahungry.com)
http://ahungry.com

Re: Using epg with gpg-agent

[Filipp Gunbin]

On 17/06/2018 18:20 -0400, Richard Stallman wrote:

> Does anyone know how to make the Emacs encryption commands such as
> epa-decrypt-region work with gpg-agent on a text console?
> If I start gpg-agent in the usual way before running Emacs,
> then when I try to decrypt, gpg-agent and Emacs both try to
> read from the terminal so the passphrase always gets garbled.

AFAIK, currently (Emacs master, GnuPG 2.2.8) only `(setq
epg-pinentry-mode 'loopback)' should be needed (that's what I have).
So, no explicit configuration in gpg-agent.conf.

Filipp

Re: Using epg with gpg-agent

[Richard Stallman]

[[[ To any NSA and FBI agents reading my email: please consider    ]]]
[[[ whether defending the US Constitution against all enemies,     ]]]
[[[ foreign or domestic, requires you to follow Snowden's example. ]]]

Thanks for showing me this.  I tried it and discovered that somehow
I have GPG version 1 installed and can't install version 2.  When I get
that installed, I will try your solution again.

-- 
Dr Richard Stallman
President, Free Software Foundation (https://gnu.org, https://fsf.org)
Internet Hall-of-Famer (https://internethalloffame.org)