Initialize PASS

SSH, OpenPGP, GPG
1

Hi. I’ve been using Pass with Onlykey derived PGP keys without problems.

I decided to try to use stored PGP keys (RSA 4096 generated from CLI) to my OKY and was able to successfully initialize OKY with those derived keys and then initialized pass with the new OKY stored keys.

I have stored key user input mode to “Button Press” previously enabled prior to initializing.

After generating a credential, when I try to decrypt that credential, there’s definitely a pause that’s appears to be the request to Onlykey for the secret key but the Onlykey never flashes and eventually I get a message “gpg decryption failed no secret key”

When I re-initialize both OKY and pass with the derived keys, everything is fine as it has always been.

What do you think I’m doing incorrectly?

Mac OS X 14.6.1
OKY app 5.3.6
Onlykey-agent 1.1.15 lib-agent 1.0.6
latest firmware

2

Update - I was able to get Onlykey to decrypt the database.

Also one comment about the documentation- I could not initialize OnlyKey stored GPG keys using these instructions in the docs:

onlykey-gpg init “Bob Smith bob@protonmail.com” -sk ECC5 -dk ECC4 -i publickey.bob@protonmail.com.asc

I would always get “gpg: error reading key: No secret key” message.

What worked for me (on OSX) was to remove the name and only use the email address OR use the key ID (without quotes):

onlykey-gpg init “bob@protonmail.com” -sk ECC5 -dk ECC4 -i publickey.bob@protonmail.com.asc
or:
onlykey-gpg init ABCD1234 -sk ECC5 -dk ECC4 -i publickey.bob@protonmail.com.asc

3

I’m not sure from this example whether discourse ate part of your formatting or if you actually left out the <> in the first example you provided. Those are required if you want to use that style of identifier, I think.

4

I did use the <> characters when trying to initialize but didn’t work on my OS X.
Took me long time to figure out- using key ID worked