Debian系统下./gnupg文件权限是否正确？脚本报错：Error: no key for encrypten set

Alright, let's tackle this issue step by step—we'll start with verifying your .gnupg permissions (since you suspect that's off) then dig into the "no key for encrypting set" error your script is throwing.

1. Fix .gnupg Permissions First #

GnuPG is super strict about permissions to keep your keys secure. On Debian, your ~/.gnupg directory and its contents need tight restrictions:

• Check current permissions with these commands:

  ls -ld ~/.gnupg
  ls -l ~/.gnupg/
  

• The .gnupg directory should show drwx------ (700 permissions). If it doesn't, fix it immediately:

  chmod 700 ~/.gnupg
  

• For files inside: Private key files (like secring.gpg or items in private-keys-v1.d/) need rw------- (600) permissions. Public key files can be rw-r--r-- (644), but if any look misconfigured, adjust them with chmod too.

2. Confirm You Have a Valid Encryption Key #

That error often means GnuPG can't find a key it can use for encryption. Let's check:

• List all your keys to see what's available:

  gpg --list-keys
  

  Look for entries marked with [E]—that means the key has encryption capabilities. Note the key ID (the long 16-character string) or the email associated with the key.
• If you don't have any keys, generate one with:

  gpg --full-generate-key
  

  Follow the prompts: pick RSA as the type, use a 4096-bit key length (more secure), set an expiration date, then enter your name/email and a strong passphrase.

3. Check Your Script's Key Configuration #

Since you're using PHP's GnuPG extension, your script needs to explicitly tell GnuPG which key to use for encryption. Double-check this part:

$gpg = new gnupg();
// Replace this with your actual key ID or email from step 2
$gpg->addencryptkey("your-key-id-or-email@example.com");

// Then run your encryption logic
$encrypted_data = $gpg->encrypt("your sensitive data");

Make sure the key ID/email you're passing matches exactly what gpg --list-keys showed. Typos here are a common culprit.

4. Test Encryption via Command Line #

To rule out script-specific issues, test encryption directly with GnuPG on the command line:

echo "test encryption" | gpg --encrypt --recipient your-key-id-or-email -o test_encrypted.gpg

If this works and creates test_encrypted.gpg, the problem is definitely in your script's setup. If it fails, go back to steps 1 and 2 to fix permissions or key issues.

内容的提问来源于stack exchange，提问作者user9308833