1

I have been attempting to create a system of GPG subkeys to distribute to my various computers. I have created subkey pairs for each computer with the master secret key removed as per the instructions here and here. I have the distributed the relevant .gnupg folders to my computers via scp. I am then testing these by attempting to access my pass database. The keypair folder I sent to my laptop works fine and decrypts my passwords, but the one I sent to another headless system does not, and when I attempt to show a password I get the follwoing error message:

gpg: decryption failed: No secret key

If I try using the same subkey pair .gnupg folder - the one intended for the headless box - on my laptop, it works fine to decrypt.

All systems run Arch Linux and the same versions of gnupg 2.1.8 and pass 1.6.5.

Can anyone suggest why the subkeys don't work to decrypt on my headless system?

1 Answers1

1

Ok, so it turns out the use of pass was a red herring. I tried simply encrypting a document and then attempting to decrypt it. With the -v flag this showed that the problem was with the pinentry agent. So with the instructions from the answer here. I have now got it working with pinentry-curses.