You have to explicitly enable it yourself, either by passing -enable-ssh-support on the command-line (which we could do by editing the Xsession script) or by adding a line to a configuration file. This is perfectly adequate for us as well.īy default, the gpg-agent doesn’t enable its SSH agent. Xfce4 also starts the agent for you in /etc/xdg/xfce4/xinitrc in a slightly different way to the above, as long as you don’t already have an agent running. You probably already have the gpg-agent running without knowing, so part one of the equation has already been sorted out for you. When you installed the gpg-agent package, it installed an Xsession script into /etc/X11/Xsession.d/90gpg-agent that automatically starts the GnuPG agent for you. TL DR (quick setup): $ echo enable-ssh-support > ~/.gnupg/nf Linux: Starting the correct agent at login
#Pageant putty for mac how to#
On Linux you’ll generally either get the normal OpenSSH ssh-agent running, or maybe GNOME Keyring’s SSH agent, or some other agent from a variety of other packages so we’ll need to work out how to disable those agents and use the GnuPG agent instead. The hard part isn’t getting the agent to talk to the card or anything like that, but using the correct agent when you login to your session. If you followed my previous guide to setting up an OpenPGP card, you’ll already have the right key in the correct slot, so you’re all set. You simply need to make sure you have an authentication-only RSA key loaded in the card’s 3rd (Authentication key) slot, and use gpg-agent‘s SSH agent: ~ $ gpg2 -card-statusĪpplication ID. Getting this working is actually surprisingly simple.
#Pageant putty for mac update#
Update : You should also look at Lars Wirzenius’s post on Using a Yubikey 4 for ensafening one’s encryption. Newer instructions will be added there this post will not see further updates. NOTE: I have started rewriting this post over on my wiki, so that anyone can update it. The first and most useful such extra feature of those cards is using the authentication key for SSH.
Now that I’m using OpenPGP cards for GnuPG, I may as well start using them for their other bells and whistles too.
0 kommentar(er)
