Re: [gentoo-user] How does ssh know to use pinentry?

2014-07-06 Thread Rich Freeman
On Sat, Jul 5, 2014 at 11:42 PM, Chris Stankevitz chrisstankev...@gmail.com wrote: On Sat, Jul 5, 2014 at 7:57 PM, Rich Freeman ri...@gentoo.org wrote: In any case, I suspect that gpg-agent is actually serving passwords to openssh, so the file you want is ~/.gnupg/gpg-agent.conf - it probably

Re: [gentoo-user] How does ssh know to use pinentry?

2014-07-06 Thread Chris Stankevitz
On Sun, Jul 6, 2014 at 3:25 AM, Rich Freeman ri...@gentoo.org wrote: Typically they are launched from a bash profile, or an X11 startup script. KDE/Gnome look like they have it in their default scripts. Just grep -r gpg-agent /etc and you'll find where it is being loaded if you didn't add

Re: [gentoo-user] How does ssh know to use pinentry?

2014-07-06 Thread Mick
On Sunday 06 Jul 2014 16:29:03 Chris Stankevitz wrote: On Sun, Jul 6, 2014 at 3:25 AM, Rich Freeman ri...@gentoo.org wrote: Typically they are launched from a bash profile, or an X11 startup script. KDE/Gnome look like they have it in their default scripts. Just grep -r gpg-agent /etc and

Re: [gentoo-user] How does ssh know to use pinentry?

2014-07-06 Thread Alan McKinnon
On 06/07/2014 03:41, Chris Stankevitz wrote: I am trying to ssh into a site using PKI. I have a private key in my .ssh directory that requires a passphrase. ssh is asking me for my passphrase using a terrible program called pinentry. It's terrible for a bunch of reasons, and if you are

[gentoo-user] Changing cpan repo in emerge

2014-07-06 Thread shawn wilson
How do I change emerge/ebuild from using cpan to metacpan to a local repo? I see mirror://cpan/foo and I figure SRC_URI gets scraped and changed (I'm guessing this happens somewhere in python since I don't see anything happening to SRC_URI in perl-module.eclass). I just want to use metacpan for

Re: [gentoo-user] How does ssh know to use pinentry?

2014-07-06 Thread Chris Stankevitz
On Sun, Jul 6, 2014 at 12:09 PM, Mick michaelkintz...@gmail.com wrote: I think that the idea of keeping your passphrase in the clipboard is frowned upon for security reasons. Not only because of any potential memory leaks, but because you may inadvertently paste it in GUI fields/areas you were

Re: [gentoo-user] How does ssh know to use pinentry?

2014-07-06 Thread Chris Stankevitz
On Sun, Jul 6, 2014 at 1:32 PM, Alan McKinnon alan.mckin...@gmail.com wrote: Why not do the obvious thing instead? Run keychain and have it unlock your keys *once* when the workstation boots up. ssh then always uses that key as it is unlocked. Alan, Thank you. FYI, I do not have a problem

Re: [gentoo-user] How does ssh know to use pinentry?

2014-07-06 Thread Rich Freeman
On Sun, Jul 6, 2014 at 8:40 PM, Chris Stankevitz chrisstankev...@gmail.com wrote: On another note, from my OP, I am still curious how the ssh software knows to use /usr/bin/pinentry to fetch my passphrase. In a follow-up post, I discovered that this mechanism only works if an environment

Re: [gentoo-user] How does ssh know to use pinentry?

2014-07-06 Thread Chris Stankevitz
On Sun, Jul 6, 2014 at 5:45 PM, Rich Freeman ri...@gentoo.org wrote: GPG_AGENT_INFO tells ssh to use gpg-agent. Hi Rich, Are you saying that the ssh software checks for the presence of the GPG_AGENT_INFO environment variable? It find it odd that ssh hard-code the names of all possible agents.

Re: [gentoo-user] How does ssh know to use pinentry?

2014-07-06 Thread Rich Freeman
On Sun, Jul 6, 2014 at 9:18 PM, Chris Stankevitz chrisstankev...@gmail.com wrote: On Sun, Jul 6, 2014 at 5:45 PM, Rich Freeman ri...@gentoo.org wrote: GPG_AGENT_INFO tells ssh to use gpg-agent. Are you saying that the ssh software checks for the presence of the GPG_AGENT_INFO environment