arno/YubiKey-Guide
1
0
Fork 0
mirror of https://github.com/drduh/YubiKey-Guide.git synced 2025-06-07 09:08:45 +00:00
Code Issues Releases Wiki Activity

update config urls

Browse Source
This commit is contained in:
drduh 2025-03-16 14:07:20 -07:00
parent 3ab143b4c1
commit 6d84aae08d
1 changed files with 7 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
README.md
View File

@ -277,12 +277,12 @@ export GNUPGHOME=$(mktemp -d -t gnupg-$(date +%Y-%m-%d)-XXXXXXXXXX)
## Configuration ## Configuration
Import or create a [hardened configuration](https://github.com/drduh/config/blob/master/gpg.conf): Import or create a [hardened configuration](https://github.com/drduh/config/blob/main/gpg.conf):
```console ```console
cd $GNUPGHOME cd $GNUPGHOME
wget https://raw.githubusercontent.com/drduh/config/master/gpg.conf wget https://raw.githubusercontent.com/drduh/config/main/gpg.conf
``` ```
The options will look similar to: The options will look similar to:
@ -934,12 +934,12 @@ Initialize GnuPG:
gpg -k gpg -k
``` ```
Import or create a [hardened configuration](https://github.com/drduh/config/blob/master/gpg.conf): Import or create a [hardened configuration](https://github.com/drduh/config/blob/main/gpg.conf):
```console ```console
cd ~/.gnupg cd ~/.gnupg
wget https://raw.githubusercontent.com/drduh/config/master/gpg.conf wget https://raw.githubusercontent.com/drduh/config/main/gpg.conf
``` ```
Set the following option. This avoids the problem where GnuPG will repeatedly prompt for the insertion of an already-inserted YubiKey: Set the following option. This avoids the problem where GnuPG will repeatedly prompt for the insertion of an already-inserted YubiKey:
@ -1094,7 +1094,7 @@ echo "test message string" | \
--output encrypted.txt --output encrypted.txt
``` ```
Use a [shell function](https://github.com/drduh/config/blob/master/zshrc) to make encrypting files easier: Use a [shell function](https://github.com/drduh/config/blob/main/zshrc) to make encrypting files easier:
```console ```console
secret () { secret () {
@ -1193,12 +1193,12 @@ YubiKey will blink when it is waiting for a touch. On Linux, [maximbaz/yubikey-t
## SSH ## SSH
Import or create a [hardened configuration](https://github.com/drduh/config/blob/master/gpg-agent.conf): Import or create a [hardened configuration](https://github.com/drduh/config/blob/main/gpg-agent.conf):
```console ```console
cd ~/.gnupg cd ~/.gnupg
wget https://raw.githubusercontent.com/drduh/config/master/gpg-agent.conf wget https://raw.githubusercontent.com/drduh/config/main/gpg-agent.conf
``` ```
**Important** The `cache-ttl` options do **not** apply when using YubiKey as a smart card, because the PIN is [cached by the smart card itself](https://dev.gnupg.org/T3362). To clear the PIN from cache (equivalent to `default-cache-ttl` and `max-cache-ttl`), remove YubiKey, or set `forcesig` when editing the card to be prompted for the PIN each time. **Important** The `cache-ttl` options do **not** apply when using YubiKey as a smart card, because the PIN is [cached by the smart card itself](https://dev.gnupg.org/T3362). To clear the PIN from cache (equivalent to `default-cache-ttl` and `max-cache-ttl`), remove YubiKey, or set `forcesig` when editing the card to be prompted for the PIN each time.