Re: OpenPGP card: how to lock the card again so that PIN is required

Hi, On 01.01.19 08:36, Matthias Apitz wrote: > How can I meanwhile 'reset' the OpenPGP card so that on next request for > the secrets (decrypt, signing, ssh) the PIN is requested? for key slots 1 and 2 there probably is no way to do this other than unplugging und replugging the device. See also t

Re: Forwarding both gpg and ssh agents

Hi, as far as I know this is independently of GnuPG and just depends on the configuration of the SSH client. Maybe have a search for "Stepping Stone" configuration or alike. This should use your local keys. For Example (based on something I used in the past): Host thirdMachine-alias Host

Re: use gpg-agent for ssh login

Hi, did you install gnupg2 as well? OpenPGP Card 3.3 is not supported by oldoldold version 1.4 ... I don't know if gnupg2 is installed by default on Kubuntu and I don't know if gnupg2 is recent enough on 16.04 either. You may install the stable debian ones if needed. They should be able to work wi

Conditions for changing admin PIN not clarified (GNUK)

Hello everyone, we realized (because of the question of a user), that there are conditions in which GnuPG is not questioning to short PIN for admin. This seems to be specific for Gnuk devices, as I could not reproduce on OpenPGP Card 2.1 This is what happened: * factory-reset of device (NK Start

Available Key Attributes Options

Hello, I already asked a similar question but wasn't so clear what I really need, so I give it a new try. With these kind of commands $ gpg-connect-agent "SCD SETATTR KEY-ATTR --force 1 22 ed25519" /bye $ gpg-connect-agent "SCD SETATTR KEY-ATTR --force 2 18 cv25519" /bye $ gpg-connect-agent "SCD

Re: libpampoldi

Hi, as far as I know poldi did not get updates for a long time. It is either abandoned or considered "finished". Well, there probably isn't changing a lot in this topic anyway. Which OS do you use? It is available for Debian-like Distros and Arch Linux for sure. I did not looked for other Distros

Re: Information on scdaemon protocol commands

Thanks a lot! But what if I want to know more about 'key-attr' for example? I tried scd help setattr key-attr help key-attr scd help key-attr and alike... On 09/29/2017 03:53 PM, Peter Lebbing wrote: > On 29/09/17 15:29, Alexander Paetzelt | Nitrokey wrote: >> Is there an

Information on scdaemon protocol commands

Hello, I was happy to see, that there is a documentation for the SETATTR command for invoking commands to scdaemon directly by using gpg-connect-agent on https://www.gnupg.org/documentation/manuals/gnupg-2.0/Scdaemon-SETATTR.html#Scdaemon-SETATTR but realized that it is to be written :) Is there

Re: Do not cache smart card PIN

Hello Justin, this is not possible right now. I did a similar feature request here https://dev.gnupg.org/T3362 Maybe you have something to add. Kind regards Alex On 08/28/2017 03:12 AM, Justin Chiu wrote: > Hi, > > Is it possible to instruct a smart card to not cache its PIN or have > GnuPG f

Powering down smartcard does not work

Hello, I try to power down my gnupg smartcard after some time by adding 'card-timeout 15' to ~/.gnupg/scdaemon.conf but the card seems to stay powered as the PIN stays cached. Do you have any idea why the config is not working correctly? Kind regards Alex __

Cache Timeout not working correctly

Hello, I try to get the max-cache-ttl-ssh in the gpg-agent.conf working, but the cache is still saved until physically disconnecting the gnupg smartcard. I have a working ~/.gnupg/gpg-agent.conf with following content: default-cache-ttl 1 max-cache-ttl 1 default-cache-ttl-ssh 1 max-cache-ttl-ssh

Backup-Option of 'card-edit->generate' not working as intended?

Hello, I really tried allot now and after fully reading this discussion https://lists.gt.net/gnupg/users/80661#80660 and after getting a confirmation and a suggestion what is probably going wrong of a user, I hope you may can help me and maybe fix the problem. *What I want to do* Create a key for