gpg --decrypt

[Alan Little]

I'm trying to operate gpg through proc_open. I can encrypt this way, just
fine, but when I try to decrypt I get:

gpg: cannot open `/dev/tty': Device not configured

Here's what I'm using; the same basic code works fine for encrypting:

<?php
$cmd =
'/usr/bin/gpg '.
'--decrypt '.
'--homedir /usr/home/userid/.gnupg';

$message =
'-----BEGIN PGP MESSAGE-----
Version: GnuPG v1.2.2 (FreeBSD)

[Yada, yada]
-----END PGP MESSAGE-----';

$pass =
'[passphrase]';

$descriptors = array(
0 => array('pipe', 'r'),
1 => array('pipe', 'w'),
2 => array('file', '/usr/home/userid/error.gpg', 'a')
);

$process = proc_open($cmd, $descriptors, $pipes);
list($stdin, $stdout, $stderr) = $pipes;

fputs($stdin, $message);

while (!feof($stdout)) {
$line = fgets($stdout);
echo $line;
}

fputs($stdin, $pass);
fclose($stdin);

while (!feof($stdout)) {
$line = fgets($stdout);
echo $line;
}
?>

--
Alan Little
Phorm PHP Form Processor
http://www.phorm.com/

[Iván Sánchez Ortega]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Alan Little wrote:

I'm trying to operate gpg through proc_open. I can encrypt this way, just
fine, but when I try to decrypt I get:

gpg: cannot open `/dev/tty': Device not configured

Here's what I'm using; the same basic code works fine for encrypting:

Calling "gpg" with proc_open or similar methods is a mess... consider using
the PECL GPG extension - have a look at http://pecl.php.net .

- --
- ----------------------------------
Iván Sánchez Ortega -i-punto-sanchez--arroba-mirame-punto-net

Gentlemen, start your flamethrowers.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iD8DBQFEXfBr3jcQ2mg3Pc8RAtMfAJ4p7iYqjSF/EO5mN/UjH+K4jH2t3wCfWnee
PvzDOkIh6dVaS+EtQnBFYJE=
=VXdM
-----END PGP SIGNATURE-----

[Toby Inkster]

Alan Little wrote:

I'm trying to operate gpg through proc_open. I can encrypt this way, just
fine, but when I try to decrypt I get:

gpg: cannot open `/dev/tty': Device not configured

GPG doesn't read the pass phrase from STDIN -- it reads it from the
terminal. It might seem like a minor difference, but the effect is that
you can't pass the passphrase in via STDIN.

You could try including the options "--no-tty --passphrase-fd 0".

--
Toby A Inkster BSc (Hons) ARCS
Contact Me ~ http://tobyinkster.co.uk/contact

[Alan Little]

Carved in mystic runes upon the very living rock, the last words of
Iván Sánchez Ortega of comp.lang.php make plain:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Alan Little wrote:

I'm trying to operate gpg through proc_open. I can encrypt this way,
just fine, but when I try to decrypt I get:

gpg: cannot open `/dev/tty': Device not configured

Here's what I'm using; the same basic code works fine for encrypting:

Calling "gpg" with proc_open or similar methods is a mess... consider
using the PECL GPG extension - have a look at http://pecl.php.net .

Thanks for your response. Do you think it will be easier to sort out the
proc_open() method, or to figure out how to compile and install the
extension? And if I want to include this in distributed code later, does
that make a difference?

--
Alan Little
Phorm PHP Form Processor
http://www.phorm.com/

[Alan Little]

Carved in mystic runes upon the very living rock, the last words of Toby
Inkster of comp.lang.php make plain:

Alan Little wrote:

I'm trying to operate gpg through proc_open. I can encrypt this way,
just fine, but when I try to decrypt I get:

gpg: cannot open `/dev/tty': Device not configured

GPG doesn't read the pass phrase from STDIN -- it reads it from the
terminal. It might seem like a minor difference, but the effect is
that you can't pass the passphrase in via STDIN.

You could try including the options "--no-tty --passphrase-fd 0".

Thanks; I wasn't aware of those options.

Now my script just hangs. I'm not sure where; I put limiters on the read
loops, and it still hangs. I noticed in the docs for proc_open, it says:

The file descriptor numbers are not limited to 0, 1 and 2 - you
may specify any valid file descriptor number and it will be
passed to the child process. This allows your script to interoperate
with other scripts that run as "co-processes". In particular, this
is useful for passing passphrases to programs like PGP, GPG and
openssl in a more secure manner.

It specifically mentions passing passphrases to GPG. I tried the
following changes in my script, but it still hangs:

$cmd =
'/usr/bin/gpg '.
'--decrypt '.
'--homedir /usr/home/userid/.gnupg '.
'--no-tty '.
'--passphrase-fd 3';

$descriptors = array(
0 => array('pipe', 'r'),
1 => array('pipe', 'w'),
2 => array('file', '/usr/home/thebest/error.gpg', 'a'),
3 => array('pipe', 'r')
);

list($stdin, $stdout, $stderr, $passpipe) = $pipes;

fputs($passpipe, $pass);

--
Alan Little
Phorm PHP Form Processor
http://www.phorm.com/

[Alan Little]

Carved in mystic runes upon the very living rock, the last words of Alan
Little of comp.lang.php make plain:

I'm trying to operate gpg through proc_open. I can encrypt this way,
just fine, but when I try to decrypt I get:

I got it:

$cmd =
'/usr/bin/gpg '.
'--decrypt '.
'--homedir /usr/home/userid/.gnupg '.
'--no-tty '.
'--passphrase-fd 3';

$message = '[encrypted message]';

$pass = '[passphrase]';

$descriptors = array(
0 => array('pipe', 'r'),
1 => array('pipe', 'w'),
2 => array('file', '/usr/home/userid/error.gpg', 'a'),
3 => array('pipe', 'r')
);

$process = proc_open($cmd, $descriptors, $pipes);
list($stdin, $stdout, $stderr, $passpipe) = $pipes;

fputs($stdin, $message);
fclose($stdin);

fputs($passpipe, $pass);
fclose($passpipe);

while (!feof($stdout)) {
$line = fgets($stdout);
echo $line;
}

--
Alan Little
Phorm PHP Form Processor
http://www.phorm.com/