Repository navigation
touchid-agent v0.4.0
touchid-agent v0.4.0
macOS SSH agent backed by the Secure Enclave and Touch ID. Drop-in
replacement for yubikey-agent.
Changes since v0.3.0
- fix: codesign -dvv for Developer ID detection in build-pkg.sh
- ci: add workflow_dispatch for release.yml dry-runs
- feat: signed .pkg installer for fleet deployment
- Part of this is implemented now as part of the laucnhd deployment feature
- Simplifying documentation
- New todos
- Added new TODOs
- docs: distribution & deployment roadmap
- Removed impossible and irrelevant TODO
Verifying this release
```
shasum -a 256 -c touchid-agent-VERSION-darwin-universal.tar.gz.sha256
```
The binary is signed with a Developer ID certificate and notarized by Apple.
Gatekeeper validates the notarization ticket online on first launch (flat
Mach-O CLI binaries cannot be stapled).
Installing
```
tar -xzf touchid-agent-VERSION-darwin-universal.tar.gz
sudo install -m 755 touchid-agent /usr/local/bin/
```
See README.md for SSH config and launchd setup.