I want to remove the passphrase from gpg key after creating it. Why? . Because the tigase-kontalk documentation says so and I want to compile and setup my own version of this server . But am stuck at this point
Create GPG key Create a GPG key for both signing and encrypting, and remove its passphrase after creating it
I want a linux gpg command to remove the passphrase or to export unprotected keys.
3 Answers
Here is a more complete answer based on Justin's:
(Using gpg 1.4.16 on Ubuntu 14)
- Get the ID of your key like this:
gpg --list-secret-keys
This will output a few lines similar to below. The key ID is the value XXXX
/home/username/.gnupg/secring.gpg
----------------------------------
sec 4096R/XXXX <creation date>
uid name <email.address>
ssb 4096R/YYYY <creation date>
Open the gpg key edit submenu like this:
gpg --edit-key XXXXYou will see information about the key.
Type
passwdat the prompt to change the password:gpg> passwdEnter your existing passphrase.
Enter the new passphrase for this secret key. (Leave this blank and press Enter)
Press Enter twice and consider the warnings from the tool and its implications before proceeding.
You don't want a passphrase - this is probably a *bad* idea!
Do you really want to do this? (y/N) y
Let me share what I found. I thought I might share in case there is another lost soul In the bash shell,
gpg2 --batch --gen-key <<EOF
%no-protection
Key-Type:1
Key-Length:2048
Subkey-Type:1
Subkey-Length:2048
Name-Real: My super name
Name-Email:
Expire-Date:0
EOF
The key can now be exported
gpg2 --export-secret-key fingerprinthere > private-key.key
gpg2 --export fingerprintshuld_be_put_here > public-key.key
It's simple. Just run:
gpg --edit-key <yourkeyhere>
passwd
When GnuPG prompts for the new passphrase, just leave it blank and hit enter.
Source:
