Re: (pre)cache password rather than use allow-loopback-pinentry

2017-07-21 Thread Werner Koch
On Fri, 21 Jul 2017 11:37, di...@webweaving.org said: > And I really would not mind to be able to refer to subkeys by number -and- > fpr; as the fpr of a subkey is a but cumbersome to extract afaik (double > —fingerprint). Using the number with the quick commands is not a good idea because anot

Re: (pre)cache password rather than use allow-loopback-pinentry

2017-07-21 Thread Dirk-Willem van Gulik
> On 21 Jul 2017, at 11:20, Werner Koch wrote: > > On Fri, 21 Jul 2017 10:32, di...@webweaving.org said: > >> Those —quick commands are a huge help. The one thing missing seems to be one >> for the routine extension of the expiry of subkeys. > > In general I think that it is easier to just ad

Re: (pre)cache password rather than use allow-loopback-pinentry

2017-07-21 Thread Werner Koch
On Fri, 21 Jul 2017 10:32, di...@webweaving.org said: > Those —quick commands are a huge help. The one thing missing seems to be one > for the routine extension of the expiry of subkeys. In general I think that it is easier to just add a new subkey. However< I can see that it makes sense for su

Re: (pre)cache password rather than use allow-loopback-pinentry

2017-07-21 Thread Werner Koch
On Fri, 21 Jul 2017 10:05, di...@webweaving.org said: > Thanks - that is a nice treasure trove you unearthed for me. Thanks ! Some examples are give at https://gnupg.org/faq/whats-new-in-2.1.html#quickgen > Ok - I’ll need to investigate as to why this does work for our setting (auto > rene

Re: (pre)cache password rather than use allow-loopback-pinentry

2017-07-21 Thread Dirk-Willem van Gulik
> On 21 Jul 2017, at 10:05, Dirk-Willem van Gulik wrote: > >>> And then let the batch.commands (which does a complex dance of subkey >>> renewal and some chip card shuffling) run against that ? >> >> Please check wether some of the new --quick-foo commands can be helpful. > > Thanks - that is

Re: (pre)cache password rather than use allow-loopback-pinentry

2017-07-21 Thread Dirk-Willem van Gulik
> On 21 Jul 2017, at 08:46, Werner Koch wrote: > > On Thu, 20 Jul 2017 20:04, di...@webweaving.org said: > >> cat batch.commands | gpg2 --no-tty —batch —passphrase-XX XX >> --command-fd 0 --pinentry-mode loopback … > > This is not going to work. --command-fd must always be used in > co