gpg - bunnyamin/bunnix GitHub Wiki

GPG (GNU Privacy Guard)

Delete key from keyring

List all keys gpg --list-keys, output example:

...
pub   ed25519 2011-04-10 [SC]
      25CB0F6456670C953391AD692907EA4B6387D34F
uid           [ unknown] Author <[email protected]>

...

Delete key:

  • gpg --delete-key 25CB0F6456670C953391AD692907EA4B6387D34F

Verify signature

Verify message:

  • gpg --verify signature.sig

Verify file:

  • gpg --verify signature.sig <file>

Import public key

From data file:

  • gpg --import key.pub.pgp

From input:

  • gpg --import < '...'

From keyserver:

  • gpg --recv-keys <fingerprint>

From specific keyserver, note that the key server is represented as a string:

  • gpg --keyserver '<key server>' --recv-keys <fingerprint>
  • For key servers, see https://sks-keyservers.net/. For example, hkp://pool.sks-keyservers.net:80.

Error, problem, troubleshoot

Error Cause Remedy
WARNING: This key is not certified with a trusted signature! There is no indication that the signature belongs to the owner. No public key that you have trusted has signed the key in question.
gpg: there is a secret key for public key "25CB0F6456670C953391AD692907EA4B6387D34F"! Delete the secret key: gpg --delete-secret-key 25CB0F6456670C953391AD692907EA4B6387D34F
gpg: deleting secret key failed: No pinentry for 25CB0F6456670C953391AD692907EA4B6387D34F unknown Unsure. If executed gpg --delete-secret-key then try again gpg --delete-key 25CB0F6456670C953391AD692907EA4B6387D34F.
gpg: Can't check signature: No public key For example, there could be multiple public keys. The gpg --verify <target> should return information about the relevant key. For example, that it is using RSA key <fingerprint>. Use that information to download the relevant public key gpg --recv-keys <RSA key fingerprint>.
⚠️ **GitHub.com Fallback** ⚠️