forked from gpg/gnupg
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Add option for scdaemon to prompt user to ack card.
This is useful, e.g., for Yubikeys configured with fixed touch policy.
- Loading branch information
Showing
3 changed files
with
31 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
1512c7b
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
To enable YubiKey touch prompts:
scdaemon
~/.gnupg/scdaemon.conf
:gpg-agent
1512c7b
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This is great! Do you have plans to submit upstream?
1512c7b
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I did submit the patch upstream - here and discussion here - but unfortunately they have not accepted it. It looks like they have implemented a different approach which is not based on using the Yubikey hardware confirmation but, instead, adds a software-based confirmation step to take the place of the Yubikey tap.
1512c7b
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
They had requested the patch to be submitted via the mailing list after I posted it via the web; I tried joining the mailing list but was unsuccessful (never received moderator approval to join). At that point I did not have the time to continue pursuing acceptance of the patch, and just running my own patched build has been working fine for me. 🤷♂️