gopass: Doesn't work out of the box with CentOS

Steps to reproduce:

  1. Install a fresh CentOS 7 VM (server minimal)
  2. yum install -y wget git
  3. wget https://github.com/justwatchcom/gopass/releases/download/v1.4.0-rc1/gopass-1.4.0-rc1-linux-amd64.rpm
  4. rpm -i gopass-1.4.0-rc1-linux-amd64.rpm
  5. gpg --gen-key (all defaults, making a passphrase)
  6. gopass init (all defaults)
  7. gopass insert asdf (works)
  8. gopass asdf (fails)
You need a passphrase to unlock the secret key for
user: "Zamiell <zamiell@zamiell.com>"
4096-bit RSA key, ID F1E992A1, created 2017-09-25 (main key ID 0DA8C3E9)


Error: failed to retrieve secret 'asdf': Failed to decrypt
exit status 11

The problem seems to be that it never prompts me for my passphrase. It presumably fails because its trying to use a blank passphrase.

The same problem occurs when:

About this issue

  • Original URL
  • State: closed
  • Created 7 years ago
  • Comments: 19 (14 by maintainers)

Most upvoted comments

I’ve suffered the same problem on mac and i’m able to reproduce it like so:

  • start from clean:
    • no gpg2, no gopass, no gpg keys,
    • delete ~/.password-store and ~/.config/gopass
  • install all deps via brew: gpg2, gopass 1.6.2
  • setup a new gpg key gpg --full-gen-key with 5 years validity and a password
  • init gopass pass store: gopass init --no-git
  • store some dummy secret gopass insert bla -m using vi
  • get decrypt error via: gopass bla

it seems to be directly related to not prompting for the password. the workaround from zamiell seems to work. doing gpg --decrypt ~/.password-store/bla.gpg will prompt for password. after putting it in, gopass is able to decrypt secrets.

Looks like with the recent git refactoring in recent versions, it “works” on CentOS now, sort of.

I opened six new issues today relating to the gopass “out of the box” experience. Once they are resolved, I will give this another thorough test from the beginning on a fresh CentOS 7 VM and report back any findings.