Re: Tramp behaviour with ~/.authinfo.gpg; two queries

[Michael Albinus]

Pankaj Jangid <p4j@j4d.net> writes:

Hi,

> Two observations on Tramp. I need help in getting around.

Tramp doesn't handle authinfo files itself. It uses auth-source.el for this.

> * Observation one
>
> In a fresh instance of Emacs (27.0.60), if I try to open a remote ssh
> file, Tramp tries to load ~/.authinfo.gpg and asks for passphrase. This
> is okay. But the problem is this - as I start typing "/ssh:.." the
> passphrase prompt also come at the same input area. And when I start
> typing passphrase characters it starts switching back and forth between
> "Find file:" and "Passphrase:" prompts. I have (setq epg-pinentry-mode
> 'loopback) in my config.
>
> As a workaround, I cancel the operation. And then I start Gnus (or some
> other package that can load ~/.authinfo.gpg). Enter passphrase. And then
> open the desired remote file.
>
> Is there a proper way to handle this?

No idea. I'll try to reproduce.

> * Second observation
>
> When I open a remote ssh file and connect to the server for the first
> time, Tramp offers to save the password in ~/.authinfo even if the file
> ~/.authinfo.gpg exists and is already loaded (by some other package like
> Gnus).
>
> How can I tell Tramp to save passwords in ~/.authinfo.gpg?

The default value of auth-sources is '("~/.authinfo" "~/.authinfo.gpg"
"~/.netrc")

I suppose that auth-source checks one file after the other whether it
exist, when searching for a password. But when it wants to save the
password, it seems to take the first entry in auth-sources, instead of
checking, whether one of the files exist (and use this one).

In your case, I recommend to change the value of auth-sources to just
'("~/.authinfo.gpg")

However, this seems to be a bug in auth-source.el, so you might write a
bug report.

> Regards

Best regards, Michael.