Singing a key with a subkey

Faramir faramir.cl at gmail.com
Wed Apr 8 20:06:26 CEST 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Brian Mearns escribió:
...

> As a possible "work around", is there any way I can keep my private
> key on a flash drive, for instance, and just point GPG to it when I
> want to sign something with it, without having to actually import it
> into the keyring? I'm probably not going to do this anyway, because I
> don't have a good record with flash drives, but I'm just curious if
> it's even possible.

   Yes, I do that by making a change to gpg.conf file, each time I need
to sign another key... well, GPGShell does it for me (I can chose
between 2 saved config files), let me check what would be the line to
add to gpg.conf file. Please note probably it is possible to do this
without changing the gpg.conf file, by using gpg from CMD prompt instead
of using a GUI, but I am not sure how to do that... The line it adds to
the config file is:

secret-keyring p:\gpgfolder\secring.gpg
no-default-keyring

where p is the letter assigned to the pendrive, and gpgfolder is the
folder where your secret ring is. I am not sure why I need the
no-default-keyring line, but I tried without that line and things didn't
work so fine...

  Best Regards

P.S: if you are going to carry your whole private key in a pendrive,
make very sure it is protected with a good passphrase...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iQEcBAEBCAAGBQJJ3OeiAAoJEMV4f6PvczxA7HAH/0zu7O+AvrH+WOOkzBcGdVmf
R9q9kAMfbG74AFLoYwK2yIF729hvdT01cPm7w2xrV0czjQcyT/4s4Fcy0o1w1IMH
LycSsrM+hmb4BRY/9D1KKjDDE5X+MknbSfmhQJZGrrwzQKU5G8PyTI+NfYQ3aAO0
JryHEwKc4hJVvgFRN3KFdddDjsQhYTgUnU1jApSXP9PyHYUJIDFaEgKAkeSziPqT
paH4MUO54tyObHQA4TqOzwj6K0NMjOUOlIm/sfdqDh/AWpK2Z9vxJsulOf4PUF6d
3is1tsez8PK2ALo1x5X+U5ZAn9GixfDemBHogYnjVghsFufi2kSu3JYpBkUuhls=
=ve9c
-----END PGP SIGNATURE-----



More information about the Gnupg-users mailing list