diff --git a/README.md b/README.md index 498916a..6c901cc 100644 --- a/README.md +++ b/README.md @@ -55,6 +55,7 @@ If you have a comment or suggestion, please open an [issue](https://github.com/d - [Copy public key to server](#copy-public-key-to-server) - [Connect with public key authentication](#connect-with-public-key-authentication) - [Requiring touch to authenticate](#requiring-touch-to-authenticate) + - [OpenBSD](#openbsd) - [Troubleshooting](#troubleshooting) - [Yubikey OTP Mode and cccccccc....](#yubikey-otp-mode-and-cccccccc) - [References](#references) @@ -1223,6 +1224,10 @@ To require a touch for the signing and encrypting keys as well: The Yubikey will blink when it's waiting for the touch. +### OpenBSD + +On OpenBSD, you will need to install `pcsc-tools` and enable with `sudo rcctl enable pcscd`, then reboot in order to recognize the key. + # Troubleshooting - If you don't understand some option, read `man gpg`. @@ -1245,6 +1250,8 @@ The Yubikey will blink when it's waiting for the touch. - If you receive the error, `Error connecting to agent: No such file or directory` from `ssh-add -L`, the UNIX file socket that the agent uses for communication with other processes may not be set up correctly. On Debian, try `export SSH_AUTH_SOCK="/run/user/$UID/gnupg/S.gpg-agent.ssh"` +- If you receive the error, `Permission denied (publickey)`, increase ssh verbosity with the `-v` flag and ensure the public key from the card is being offered: `Offering public key: RSA SHA256:abcdefg... cardno:00060123456`. If it is, ensure you are connecting as the right user on the target system, rather than as the user on the local system. + - If you totally screw up, you can [reset the card](https://developers.yubico.com/ykneo-openpgp/ResetApplet.html). ## Yubikey OTP Mode and cccccccc.... @@ -1278,4 +1285,3 @@ The Yubikey has two configurations, one invoked with a short press, and the othe -