Changes between Version 10 and Version 11 of gpgOnYubiKey4


Ignore:
Timestamp:
07/29/17 00:33:00 (7 years ago)
Author:
jorrit
Comment:

--

Legend:

Unmodified
Added
Removed
Modified

  • gpgOnYubiKey4

    v10 v11  
    2424Install pinentry-tty and modify gpg-agent.conf to get rid of annoying Gnome Shell password prompt.
    2525
    26 Create  ~/.gnupg/gpg-agent.conf with following content:
    27 {{{
    28 pinentry-program /usr/bin/pinentry-tty
     26Disable annoying Gnome Shell password pop-up for gpg
     27{{{
     28echo "pinentry-program /usr/bin/pinentry-tty" >> ~/.gnupg/gpg-agent.conf
    2929}}}
    3030
    … …  
    214214}}}
    215215
    216 == access the yubikey ==
    217 install the required dependencies
     216== Create signing and authentication subkeys opn yubikey ==
     217install the required dependencies first
    218218{{{
    219219apt-get install scdaemon pcscd
    220220}}}
     221
     222{{{
     223gpg2 --edit-key BCA15A0BB95DC50BD20DF30E0ABF3A02F7869441
     224gpg (GnuPG) 2.1.15; Copyright (C) 2016 Free Software Foundation, Inc.
     225This is free software: you are free to change and redistribute it.
     226There is NO WARRANTY, to the extent permitted by law.
     227
     228Secret key is available.
     229
     230sec  rsa3072/0ABF3A02F7869441
     231     created: 2017-07-28  expires: never       usage: C   
     232     trust: ultimate      validity: ultimate
     233ssb  rsa2048/DA2E2FE728D32A1C
     234     created: 2017-07-28  expires: 2018-07-28  usage: E   
     235[ultimate] (1). Bersih NL Administration <contact@bersih.nl>
     236
     237gpg> addcardkey
     238Signature key ....: [none]
     239Encryption key....: [none]
     240Authentication key: [none]
     241
     242Please select the type of key to generate:
     243   (1) Signature key
     244   (2) Encryption key
     245   (3) Authentication key
     246Your selection? 1
     247Please enter the PIN
     248PIN:
     249What keysize do you want for the Signature key? (2048)
     250Please specify how long the key should be valid.
     251         0 = key does not expire
     252      <n>  = key expires in n days
     253      <n>w = key expires in n weeks
     254      <n>m = key expires in n months
     255      <n>y = key expires in n years
     256Key is valid for? (0) 1y
     257Key expires at zo 29 jul 2018 00:17:37 CEST
     258Is this correct? (y/N) y
     259Really create? (y/N) y
     260Please enter the Admin PIN
     261Admin PIN:
     262Please enter the passphrase to unlock the OpenPGP secret key:
     263"Bersih NL Administration <contact@bersih.nl>"
     2643072-bit RSA key, ID 0ABF3A02F7869441,
     265created 2017-07-28.
     266
     267Passphrase:
     268
     269sec  rsa3072/0ABF3A02F7869441
     270     created: 2017-07-28  expires: never       usage: C   
     271     trust: ultimate      validity: ultimate
     272ssb  rsa2048/DA2E2FE728D32A1C
     273     created: 2017-07-28  expires: 2018-07-28  usage: E   
     274ssb  rsa2048/A3DF39D25C12B3CE
     275     created: 2017-07-28  expires: 2018-07-28  usage: S   
     276     card-no: 0006 05668664
     277[ultimate] (1). Bersih NL Administration <contact@bersih.nl>
     278
     279gpg> addcardkey
     280Signature key ....: 39C2 822E 41A1 2320 4388  6492 A3DF 39D2 5C12 B3CE
     281Encryption key....: [none]
     282Authentication key: [none]
     283
     284Please select the type of key to generate:
     285   (1) Signature key
     286   (2) Encryption key
     287   (3) Authentication key
     288Your selection? 3
     289What keysize do you want for the Authentication key? (2048)
     290Please specify how long the key should be valid.
     291         0 = key does not expire
     292      <n>  = key expires in n days
     293      <n>w = key expires in n weeks
     294      <n>m = key expires in n months
     295      <n>y = key expires in n years
     296Key is valid for? (0) 1y
     297Key expires at zo 29 jul 2018 00:24:03 CEST
     298Is this correct? (y/N) y
     299Really create? (y/N) y
     300
     301sec  rsa3072/0ABF3A02F7869441
     302     created: 2017-07-28  expires: never       usage: C   
     303     trust: ultimate      validity: ultimate
     304ssb  rsa2048/DA2E2FE728D32A1C
     305     created: 2017-07-28  expires: 2018-07-28  usage: E   
     306ssb  rsa2048/A3DF39D25C12B3CE
     307     created: 2017-07-28  expires: 2018-07-28  usage: S   
     308     card-no: 0006 05668664
     309ssb  rsa2048/197D4148DB406665
     310     created: 2017-07-28  expires: 2018-07-28  usage: A   
     311     card-no: 0006 05668664
     312[ultimate] (1). Bersih NL Administration <contact@bersih.nl>
     313
     314gpg> toggle
     315
     316sec  rsa3072/0ABF3A02F7869441
     317     created: 2017-07-28  expires: never       usage: C   
     318     trust: ultimate      validity: ultimate
     319ssb  rsa2048/DA2E2FE728D32A1C
     320     created: 2017-07-28  expires: 2018-07-28  usage: E   
     321ssb  rsa2048/A3DF39D25C12B3CE
     322     created: 2017-07-28  expires: 2018-07-28  usage: S   
     323     card-no: 0006 05668664
     324ssb  rsa2048/197D4148DB406665
     325     created: 2017-07-28  expires: 2018-07-28  usage: A   
     326     card-no: 0006 05668664
     327[ultimate] (1). Bersih NL Administration <contact@bersih.nl>
     328
     329gpg> key 1
     330
     331sec  rsa3072/0ABF3A02F7869441
     332     created: 2017-07-28  expires: never       usage: C   
     333     trust: ultimate      validity: ultimate
     334ssb* rsa2048/DA2E2FE728D32A1C
     335     created: 2017-07-28  expires: 2018-07-28  usage: E   
     336ssb  rsa2048/A3DF39D25C12B3CE
     337     created: 2017-07-28  expires: 2018-07-28  usage: S   
     338     card-no: 0006 05668664
     339ssb  rsa2048/197D4148DB406665
     340     created: 2017-07-28  expires: 2018-07-28  usage: A   
     341     card-no: 0006 05668664
     342[ultimate] (1). Bersih NL Administration <contact@bersih.nl>
     343
     344gpg> keytocard
     345Please select where to store the key:
     346   (2) Encryption key
     347Your selection? 2
     348Please enter your passphrase, so that the secret key can be unlocked for this session
     349Passphrase:
     350gpg: KEYTOCARD failed: No passphrase given
     351
     352gpg> keytocard
     353Please select where to store the key:
     354   (2) Encryption key
     355Your selection? 2
     356Please enter your passphrase, so that the secret key can be unlocked for this session
     357Passphrase:
     358
     359sec  rsa3072/0ABF3A02F7869441
     360     created: 2017-07-28  expires: never       usage: C   
     361     trust: ultimate      validity: ultimate
     362ssb* rsa2048/DA2E2FE728D32A1C
     363     created: 2017-07-28  expires: 2018-07-28  usage: E   
     364ssb  rsa2048/A3DF39D25C12B3CE
     365     created: 2017-07-28  expires: 2018-07-28  usage: S   
     366     card-no: 0006 05668664
     367ssb  rsa2048/197D4148DB406665
     368     created: 2017-07-28  expires: 2018-07-28  usage: A   
     369     card-no: 0006 05668664
     370[ultimate] (1). Bersih NL Administration <contact@bersih.nl>
     371
     372gpg> save
     373}}}
     374
     375== Save and distribute the public key ==
     376{{{
     377gpg2 --keyserver pgp.mit.edu --send-keys BCA15A0BB95DC50BD20DF30E0ABF3A02F7869441
     378}}}