View previous topic :: View next topic |
Author |
Message |
mf2 n00b
Joined: 14 Jun 2007 Posts: 48
|
Posted: Fri Oct 18, 2024 5:56 am Post subject: (solved) gpg suddenly very slow |
|
|
I have been using pass together with gpg for years and everything was fine. However, since yesterday, for some reason gpg takes 12 seconds to decrypt a small password file - it used to be less than 1 second, and it is indeed very fast on my other machine.
When I kill gpg-agent it sometimes decrypts immediately, so it might have to do something with that. Running gpg under strace confirms, in fact, that it waits for gpg-agent.
I tried to change the pinentry program, but that did nothing. What else can I do to debug this?
Last edited by mf2 on Fri Oct 18, 2024 8:04 am; edited 1 time in total |
|
Back to top |
|
|
netfab Veteran
Joined: 03 Mar 2005 Posts: 1960 Location: 127.0.0.1
|
Posted: Fri Oct 18, 2024 6:07 am Post subject: |
|
|
Hi,
What is your desktop ? See this link for potential explanations. |
|
Back to top |
|
|
mf2 n00b
Joined: 14 Jun 2007 Posts: 48
|
Posted: Fri Oct 18, 2024 6:49 am Post subject: |
|
|
I am using dwm, so no desktop. That link you posted I have found earlier before, but sadly that did not help me. I even recompiled my system with USE=-keyring, but no changes. |
|
Back to top |
|
|
mf2 n00b
Joined: 14 Jun 2007 Posts: 48
|
Posted: Fri Oct 18, 2024 8:04 am Post subject: |
|
|
I fixed it by disabling the "smartcard" useflag on app-crypt/gnupg.
To find this out, I set the following in ~/.gnupg/gpg-agent.conf:
Code: |
log-file /home/philipp/.gnupg/agent.log
debug-level guru
|
That showed me that for some reason gpg-agent was waiting on the smartcard daemon:
Code: |
2024-10-18 09:58:08 gpg-agent[384615] DBG: chan_10 <- SCD SERIALNO
2024-10-18 09:58:08 gpg-agent[384615] new connection to /usr/libexec/scdaemon daemon established (reusing)
2024-10-18 09:58:08 gpg-agent[384615] DBG: chan_11 -> SERIALNO
2024-10-18 09:58:40 gpg-agent[384615] DBG: chan_11 <- ERR 100696144 No such device <SCD>
2024-10-18 09:58:40 gpg-agent[384615] DBG: chan_10 -> ERR 100696144 No such device <SCD>
|
So I figured removing scddaemon could help, and indeed it did. |
|
Back to top |
|
|
pjp Administrator
Joined: 16 Apr 2002 Posts: 20521
|
Posted: Sat Oct 19, 2024 2:12 am Post subject: |
|
|
For some reason the smartcard USE flag was enabled on some package recently. I don't know why, but perhaps that was the package.
I added -smartcard to make.conf because it's 2024 and I've never seen one, never mind used one. That it suddenly needed to be a default seems strange (presuming that this package didn't have it enabled previously). _________________ Quis separabit? Quo animo? |
|
Back to top |
|
|
bstaletic Guru
Joined: 05 Apr 2014 Posts: 407
|
Posted: Sat Oct 19, 2024 2:50 am Post subject: |
|
|
pjp wrote: | For some reason the smartcard USE flag was enabled on some package recently. I don't know why, but perhaps that was the package. |
+smartcard on gnupg has been there for years. |
|
Back to top |
|
|
pjp Administrator
Joined: 16 Apr 2002 Posts: 20521
|
Posted: Sat Oct 19, 2024 3:03 am Post subject: |
|
|
Interesting.
I removed -smartcard and checked updates with --newuse: Code: | [ebuild R ] net-libs/libpsl-0.21.5::gentoo USE="icu idn -static-libs% -test" ABI_X86="-32 (64) (-x32)" 0 KiB
[ebuild R ] app-crypt/gnupg-2.4.5-r2::gentoo USE="bzip2 -doc -ldap nls readline (-selinux) smartcard* ssl -test tofu -tools -tpm usb -user-socket -verify-sig -wks-server" 0 KiB
Total: 2 packages (2 reinstalls), Size of downloads: 0 KiB | So for me at least, it does appear to have been that package. A profile change? Since I disabled it globally, I have no way of knowing for certain, but I would expect at least whatever package wanted it the other day to be there. _________________ Quis separabit? Quo animo? |
|
Back to top |
|
|
|