[MacOS] gpg error: "public key decryption failed: No such file or directory" about passff HOT 8 CLOSED

@tuxor1337 Thank you for help - a friend helped me to find the problem.
The problem was, that "pinentry-mac" was not installed.

Sorry for opening the issue - haven't seen the hint in the passff/passff repo to install it, only read the passff/passff-host documentation.

from passff.

Try running the host script from a terminal:

$ echo -e "\x02\x00\x00\x00[]" | /path/to/passff.py | tail -c +4; echo

The typical output for an empty store is:

{"stderr": "", "version": "1.0.1", "exitCode": 0, "stdout": "Password Store\n"}

from passff.

@tuxor1337 Thanks for your quick reply!

I tried to call the script from the terminal and everything seems to be working. The output of the command was the following:

{ "exitCode": 0, "stdout": "<<a long list of pass entries>>", "stderr": "", "version": "1.2.3" }

from passff.

Okay, looks fine. At the moment, I have no idea what might have caused your issue. Let's see whether other MacOS users will report the same...

from passff.

Thanks for clarifying!

I now added a note about this in the README of the passff-host repository.

from passff.

I have run into the exact same issue — but I have pinentry-mac installed. The entries are found and displayed but any decryption attempt fails with

gpg: public key decryption failed: No such file or directory gpg: decryption failed: No such file or directory

gpg is of course installed in /usr/local/bin and works as expected in all other contexts.

from passff.

Maybe this is a config problem.

You could give the gpg-agent.conf a try if you do not already have one.

I have a folder .gpg in my profile folder which is a link to .gnupg and inside the folder I have the gpg-agent.conf with the following content:

pinentry-program /usr/local/bin/pinentry-mac

I hope this helps.

from passff.

Thanks for your response. Adding

pinentry-program /usr/local/bin/pinentry-mac

to ~/.gnupg/gpg-agent.conf indeed did the trick!

Now that I did this, I realise that brew info pinentry-mac asks you to do exactly that.

==> Caveats
You can now set this as your pinentry program like

~/.gnupg/gpg-agent.conf
    pinentry-program /usr/local/bin/pinentry-mac

It was already installed that's why I didn't see the caveat. Somehow it wasn't configured though. Must be because I usually use the shell and at one time removed the line. So, unsurprisingly, this one is completely on me. Thanks for taking the time to point me in the right direction regardless.

Now, if there was a Safari extension... But seriously, thank you so much for making this! The OTP integration works without a hitch as well. I love being able to use pass almost everywhere now.

from passff.