Re: Finally: Login via SSH authentication with OpenPGP smart card & 100% Free Software PCMCIA reader

2006-02-13 Thread Alon Bar-Lev
Hello Werner, Werner Koch wrote: > On Mon, 13 Feb 2006 13:04:24 +0200, Alon Bar-Lev said: > >> Are you aware of the PKCS#11 for OpenSSH solution >> (http://marc.theaimsgroup.com/?l=openssh-unix-dev&m=113977188917865&w=2)? > > Well, I know. However you know my point of view: pkcs#11 is a > "stan

Re: Migrate from gnupg/Linux to gnupg/win32

2006-02-13 Thread Kevin L. Collins
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 2/12/2006 2:19 PM Todd Zullinger wrote: > Kevin L. Collins wrote: >>> Following a Mozilla guide, I tried to move my gpg keyrings to the >>> CLI of gpg for windows. This was done so that I could get >>> Thunderbird signing and encrypting my e-mails.

Re: gnupg cryptocard and cardman4040

2006-02-13 Thread Werner Koch
On Sun, 12 Feb 2006 23:33:22 +0100, Bjoern Schiessle said: > Please insert the card and hit return or enter 'c' to cancel: > gpg: pcsc_connect failed: unknown reader (0x8019) Stop pcscd and make sure that gpg has been build with libusb support. Using the option --debug-ccid-driver might be he

Re: gpg: OpenPGP card not available: Assuan server fault

2006-02-13 Thread Werner Koch
On Sun, 12 Feb 2006 20:55:19 +0100, Felix E Klee said: > As I'm at it, a minor complaint: In order to get the gpg2 binary, I had > to do: You shall not build gpg2. Configure does not enable this option for a reason. Use gpg 1.4.2 (or the cvs version) for OpenPGP. This is stated at several plac

Re: only decrypting signed files?

2006-02-13 Thread Werner Koch
On Sun, 12 Feb 2006 12:16:29 -0500, Joe Smith said: > I parsed that question as the same as the last one, namely decrypt the file > if it is signed, don't if it is not. For standard use of OpenPGP you won't know wether an encrypted message is signed unless you decrypt it first. Salam-Shalom,

Re: Finally: Login via SSH authentication with OpenPGP smart card & 100% Free Software PCMCIA reader

2006-02-13 Thread Werner Koch
On Mon, 13 Feb 2006 13:04:24 +0200, Alon Bar-Lev said: > Are you aware of the PKCS#11 for OpenSSH solution > (http://marc.theaimsgroup.com/?l=openssh-unix-dev&m=113977188917865&w=2)? Well, I know. However you know my point of view: pkcs#11 is a "standard" too complex to implement correctly and e

Re: Finally: Login via SSH authentication with OpenPGP smart card & 100% Free Software PCMCIA reader

2006-02-13 Thread Alon Bar-Lev
Georg C. F. Greve wrote: > * Remote SSH logins with crypto card authentication > > Problem two was to do remote logins via SSH with authentication > through the smart card. There was a problem with the gpg-agent that > did not do PIN caching, and thus was somewhat annoying to use in real > life. W

Re: Finally: Login via SSH authentication with OpenPGP smart card & 100% Free Software PCMCIA reader

2006-02-13 Thread Werner Koch
On Mon, 13 Feb 2006 10:15:08 +0100, Georg C F Greve said: > Having a wildcard like "ALL" or "*" for CLEAR_PASSPHRASE might be > good for scripting. kill -HUP $(echo $GPG_AGENT_INFO | awk -F: '{print $2}') or just pkill gpg-agent flushed the passphrase cache Shalom-Salam, Werner ___

Re: Finally: Login via SSH authentication with OpenPGP smart card & 100% Free Software PCMCIA reader

2006-02-13 Thread Georg C. F. Greve
|| On Sun, 12 Feb 2006 12:18:32 +0100 || Werner Koch <[EMAIL PROTECTED]> wrote: wk> just let me add that there are still a couple of problems with wk> removing and re-inserting a card. I am working on this but a wk> final solution will need a few more days of wall time. True. The following

Re: Migrate from gnupg/Linux to gnupg/win32

2006-02-13 Thread Todd Zullinger
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kevin L. Collins wrote: > Following a Mozilla guide, I tried to move my gpg keyrings to the > CLI of gpg for windows. This was done so that I could get > Thunderbird signing and encrypting my e-mails. > > Apparently my secret key mae in just fine, as

Finally: Login via SSH authentication with OpenPGP smart card & 100% Free Software PCMCIA reader

2006-02-13 Thread Georg C. F. Greve
Hi all, this is more a "fyi notice" than anything else: Thanks to the efforts of Werner Koch, Harald Welte, Nils Färber and myself, last week I finally managed to solve two major problems for my personal use of smart cards / OpenPGP crypto cards, such as the Fellowship crypto card [1], that might