Bug#1142634: ITP: sshwgpg -- SSH wrapper that dynamically forwards the gpg-agent sockets

Simon Josefsson <[email protected]> Thu, 23 Jul 2026 11:32:31 +0200

Newsgroups	gmane.linux.debian.devel.wnpp
Message-ID	<87y0f2uk40.fsf__4368.24125224433$1784799332$gmane$org@josefsson.org>

I'm happy to co-maintain this.  Did you push packaging to Salsa, or how
to provide feedback and contributions?

/Simon

jjbrucker <[email protected]> writes:

> Package: wnpp
> Severity: wishlist
> Owner: Jean-Jacques B. <[email protected]>
> X-Debbugs-Cc: [email protected], [email protected]
>
> * Package name    : sshwgpg
>   Version         : 1.1.0
>   Upstream Contact: Jean-Jacques Brucker (u4sRyUhEbNU5OwyLEjfSwaXAe_42.17-002.76) <[email protected]>
> * URL             : https://codeberg.org/foopgp/sshwgpg
> * License         : GPL-3.0-only
>   Programming Lang: bash
>   Description     : SSH wrapper that dynamically forwards the gpg-agent sockets
>
>  sshwgpg (SSH With GnuPG) is a small bash wrapper around ssh(1) that
>  dynamically forwards the gpg-agent sockets (gpg + ssh) to the remote
>  server. This lets:
>  .
>   - remote gpg --sign / --decrypt use the client's OpenPGP keys
>     (typically on a smartcard);
>   - remote ssh and git push authenticate via the client's OpenPGP
>     authentication subkey, enabling multi-hop ssh chains without ever
>     copying private keys.
>  .
>  The wrapper first opens an extra ssh connection to discover the server's
>  gpg-agent socket paths, then opens the real connection with two
>  RemoteForward entries mapping those to the client's agent-extra-socket
>  and agent-ssh-socket.
>
> I am maintaining it. I am looking for "co-maintainers" or "human backup".
> I don't think I need a sponsor as I think I known quite well how Debian
> Operating system is working — I'm leading the djibian blend:
> https://foopgp.org/solutions/djibian/
>
> (This package already exist on djibian)
>
> Here is my blog post about this: https://foopgp.org/blog/2026-05-11-djibian-agentforwarding/

signature.asc (application/pgp-signature, 1.2 KB)