(17-03-2021, 12:35 AM)Ramiferous Wrote: Is askpass the same thing as a pinentry-program (set inside ~/.gnupg/gpg-agent.conf ?).

From the end-user perspective, yes. When I say "askpass", I don't mean a program named "askpass" though, I'm talking about a category of programs whose purpose is to prompt user to type some text, like ssh-askpass. Pinentry is more complex I think, as it's only supposed to be called from withing gpg, and uses a complex IPC mechanism… For the end user however, it works the same. When prompted for a password, the chosen program is spawned and you can input text within it to pass your password to safe(1).

Here is a quick showcase, using the package "ssh-askpass-gnome" on Debian 10 : safe-askpass.webm.

Note that when a TTY is available, safe will prompt the user on the TTY, unless the "-k" flag is specified (to force using the ASKPASS program set in the environment).