GNU bug report logs - #7130
24.0.50; EPA queries twice and doesn't cache passwords when decrypting files

Previous Next

Full log

View this message in rfc822 format

From: Tassilo Horn <tassilo <at> member.fsf.org>
To: Daiki Ueno <ueno <at> unixuser.org>
Cc: 7130 <at> debbugs.gnu.org
Subject: bug#7130: 24.0.50; EPA queries twice and doesn't cache passwords when decrypting files
Date: Sat, 02 Oct 2010 09:16:43 +0200

Daiki Ueno <ueno <at> unixuser.org> writes:

Hi Daiki,

>>> If you see your password is cached, that is probably because of my
>>> hack in gpg-agent:
>>>
>>> http://lists.gnupg.org/pipermail/gnupg-devel/2009-May/025045.html
>>
>> Hm, passwords aren't cached in neither with nor without symlink.  So
>> I guess that patch is not in my gnupg version.
>
> FWIW, it has been available since gnupg-2.0.13 and I confirmed it with
> Debian package based on 2.0.14.  You can try it with:
>
> $ echo aaa > test.txt
> $ gpg2 --symmetric test.txt # will ask password twice
> $ pkill -HUP gpg-agent      # clear the password cache
> $ gpg2 < test.txt.gpg       # will ask password
> $ gpg2 < test.txt.gpg       # won't ask password

Ah, I've just got you wrong.  I've thought you hacked something up that
allows retrieving the passwords in elisp and cache them in the usual epa
variables.  The caching in the agent works fine with the recipe above.

> I personally think this feature safer than caching passwords in elisp.

Yes, that's probably true.

Bye,
Tassilo

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.