Re: [O] org-passwords.el and encryption

[Eric S Fraga]

On Wednesday, 27 Apr 2016 at 09:57, Julien Cubizolles wrote:
> Eric S Fraga <address@hidden> writes:
>
>> I use gpg-agent in conjunction with keychain.  Generally works very
>> well.
>
> I'm trying to set it up but I'm running into problems. Could you precise
> a few details:
>
> + do you run keychain from your ~/.profile, and so how ? If I follow the
>   instructions at http://www.funtoo.org/Keychain, keychain can't start
>   in the login screen of the display manager (lightdm on Ubuntu in my
>   case)

I have keychain in both my .bash_profile (for when I log in in console
mode or remotely) and in my .xinitrc.  The latter is used by lightdm but
only when you have selected a non-standard desktop environment (not sure
which setting but not one of gnome, kde, etc.).  I use ratpoison...

> + do you use keychain to also manage ssh keys? If so does it use a
>   graphical tool to ask for your passphrase ?

Yes.  And yes: pinentry.  I should say that keychain works without fault
for ssh but see below for gpg.

> + how does emacs ask for the gpg passphrase: graphical (pinentry), 
> emacsclient or
>   in a minibuffer ?

Sometimes, emacs will ask and usually does so in the minibuffer.  I
cannot answer more precisely because although I am running Debian
testing on all of my systems, they all behave slightly differently when
it comes to ssh and gpg key management.  I obviously do not have exactly
the same packages installed on all of my systems...

My keychain line in my .xinitrc is:

eval $(keychain --eval --agents ssh,gpg id_rsa gpgkey )

I think the gpgkey needs to be the subkey but I am not sure.

My .bash_profile has essentially the same.

HTH,
eric

-- 
: Eric S Fraga (0xFFFCF67D), Emacs 25.0.92.1, Org release_8.3.4-655-g9fb077