Add --yes option to gpg2 when deleting source keypair

freedomofpress · Oct 14, 2020 · 5fde141 · 5fde141
1 parent fe70863
commit 5fde141
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/securedrop/crypto_util.py b/securedrop/crypto_util.py
@@ -267,7 +267,7 @@ def delete_reply_keypair(self, source_filesystem_id: str) -> None:
 
         # Always delete keys without invoking pinentry-mode = loopback
         # see: https://lists.gnupg.org/pipermail/gnupg-users/2016-May/055965.html
-        temp_gpg = gnupg.GPG(binary='gpg2', homedir=self.gpg_key_dir)
+        temp_gpg = gnupg.GPG(binary='gpg2', homedir=self.gpg_key_dir, options=["--yes"])
 
         # The subkeys keyword argument deletes both secret and public keys.
         temp_gpg.delete_keys(fingerprint, secret=True, subkeys=True)