Skip to content
This repository has been archived by the owner on Sep 16, 2022. It is now read-only.

Latest commit

 

History

History
27 lines (18 loc) · 1.39 KB

README.md

File metadata and controls

27 lines (18 loc) · 1.39 KB
Raw

gnupg-scdaemon-shared-access 👫 🔑

A script to install gnupg2 with the GPGTools scdaemon shared-access patch

How To

  • Install MacPorts
  • Sanity check the script in this repo.
  • If you trust what you read execute:
    • curl https://raw.githubusercontent.com/felddy/gnupg-scdaemon-shared-access/master/install_gnupg2.sh | sudo bash
  • Add shared-access to your .gnupg/scdaemon.conf
  • Insert your token.
  • killall -9 gpg-agent; gpg --card-status

The Problem

On Mac OS X, tokend connects to a token immediately upon its insertion, which is necessary to present the token as a (PIV) keychain in the Keychain Access, and make its keys/certificates otherwise available to the Mac OS X applications.

However, when you try to use gpg, scdaemon detects that the token is already being used - and refuses to connect to it. GPGTools patched scdaemon to support a shared-access mode, but the pull request was not accepted upstream.

This script will apply that patch to a MacPorts Portfile and install gnupg2 with the shared functionality.

For more information see: