Skip to content

Instantly share code, notes, and snippets.

@loklaan

loklaan/gpg-agent.conf

Created August 2, 2017 00:57
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save loklaan/41f39ba49ebf4ca9c97849c83f7ff242 to your computer and use it in GitHub Desktop.
Save loklaan/41f39ba49ebf4ca9c97849c83f7ff242 to your computer and use it in GitHub Desktop.
Download ZIP
GPG & SSH for Mac, the proper way?
Raw
readme.md

GPG / SSH for Mac

Getting started

Install dependencies.

brew install pinentry pinentry-mac

Copy config files to:

mkdir -p ~/.gnupg
cp gpg.conf ~/.gnupg
cp gpg-agent.conf ~/.gnupg
Raw
gpg-agent.conf
# Enables GPG to find gpg-agent
use-standard-socket
# Connects gpg-agent to the OSX keychain via the brew-installed
# pinentry program from GPGtools. This is the OSX 'magic sauce',
# allowing the gpg key's passphrase to be stored in the login
# keychain, enabling automatic key signing.
pinentry-program /usr/local/bin/pinentry-mac
Raw
gpg.conf
# Uncomment within config (or add this line)
use-agent
# This silences the "you need a passphrase" message once the passphrase handling is all set.
# Use at your own discretion - may prevent the successful interactive use of some operations.
# It is working fine for my use cases though.
batch
# Ensures the cross certification "back signature" on the subkey is present and
# valid. This protects against a subtle attack against subkeys that can sign.
require-cross-certification
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment