support to use only gpg-agent for GPG and SSH

[jonasstein]

Moving the following report from bugs.gentoo.org to upstream here. https://bugs.gentoo.org/134984 Please read also the discussion in the ticket above

Timothy Stotts 2006-05-30 21:18:59 UTC

It would be really nice for keychain to have the option to use only gpg-agent for both GPG and SSH functionality.

---

From 'info gnupg' of app-crypt/gnupg-1.9.20-r3, "3.2 Option Summary"

`--enable-ssh-support' Enable emulation of the OpenSSH Agent protocol.

 In this mode of operation, the agent does not only implement the
 gpg-agent protocol, but also the agent protocol used by OpenSSH
 (through a seperate socket).  Consequently, it should possible to
 use the gpg-agent as a drop-in replacement for the well known
 ssh-agent.

 SSH Keys, which are to be used through the agent, need to be added
 to the gpg-agent initially through the ssh-add utility.  When a
 key is added, ssh-add will ask for the password of the provided
 key file and send the unprotected key material to the agent; this
 causes the gpg-agent to ask for a passphrase, which is to be used
 for encrypting the newly received key and storing it in a
 gpg-agent specific directory.

 Once, a key has been added to the gpg-agent this way, the gpg-agent
 will be ready to use the key.

 Note: in case the gpg-agent receives a signature request, the user
 might need to be prompted for a passphrase, which is necessary for
 decrypting the stored key.  Since the ssh-agent protocol does not
 contain a mechanism for telling the agent on which
 display/terminal it is running, gpg-agent's ssh-support will use
 the TTY or X display where gpg-agent has been started.  To switch
 this display to the current one, the follwing command may be used:

      echo UPDATESTARTUPTTY | gpg-connect-agent

[mrl5]

hello @jonasstein - if you'd like to report a bug kindly use https://bugs.funtoo.org/

you can also reach us on Discord - for more info check https://www.funtoo.org/Welcome