Re: epg + pinentry + gnus

["Peter Münster" <pmlists@free.fr>]

[-- Attachment #1: Type: text/plain, Size: 852 bytes --]

On Thu, Sep 18 2014, Sergio Durigan Junior wrote:

> I use EasyPG (with gpg-agent) + Gnus, like many others, I believe.
> However, there's one thing that I can't do: make Gnus (or epg, for that
> matter) prompt me only once for the passphrase and then make gpg-agent
> cache it.  What happens instead is that whenever I open an encrypted
> message, I see the passphrase prompt in the minibuffer.

Just some ideas:
- Keep passphrase in ram forever, put these lines in
  ~/.gnupg/gpg-agent.conf:
    default-cache-ttl 99999999
    max-cache-ttl 99999999
- Allow preset passphrase for secret keys, put this in
  ~/.gnupg/gpg-agent.conf:
    allow-preset-passphrase
- Apply passphrase to all secret keys at start of session, put this in
  ~/.xinitrc:
    SSH_ASKPASS=~/bin/askpass.lisp ssh-add
  (file ~/bin/askpass.lisp is attached)

-- 
           Peter

[-- Attachment #2: askpass.lisp --]
[-- Type: application/octet-stream, Size: 631 bytes --]

#!/usr/bin/sbcl --script

;; vielleicht so:
;; gpg --list-secret-keys --with-fingerprint --with-fingerprint --with-colon
;; --list-options no-show-unusable-uids,no-show-unusable-subkeys | sed -rn 's/^fpr:::::::::(.*):/\1/p'

(defvar *fingerprints*
  (list "xxx"
        "yyy"
        "zzz"))

(with-output-to-string (out)
  (run-program "/usr/lib/ssh/ssh-askpass" nil :output out)
  (let ((s (get-output-stream-string out)))
    (dolist (fp fingerprints)
      (with-input-from-string (in s)
        (run-program "/usr/lib64/gpg-preset-passphrase" (list "--preset" fp)
                     :input in :output nil)))
    (princ s)))