Re: FW: yubikey public key

2019-04-04 Thread Werner Koch
On Thu, 4 Apr 2019 14:16, jennifer.m...@pacificorp.com said: > I got a yubikey 5 working with Gnupg agent by writing the key direct > to the card on CentOS 7. Then I was tasked with writing documentation FWIW, GnuPG 2.3 will have full support for Yubikey 4 and 5 which includes support for the

Re: FW: yubikey public key

2019-04-04 Thread Peter Lebbing
Hi Jennifer, On 04/04/2019 16:16, Mead, Jennifer wrote: > What other folks are struggling with (just guessing this is the issue) > is that when they dump the public key (to move to another server and > add to the authorized_keys file) they get a different style output > than I do. I get a string

Re: card-sized 4 Kbit RSA Smartcard recommendation with 3 slots

2019-04-04 Thread Andrew Gallagher
On 04/04/2019 16:10, Peter Lebbing wrote: > I don't expect 4k RSA to be very snappy, though. You might want to > reconsider your choice of algorithm and/or length. On the v2.1 Zeitcontrol cards, 4096 bit RSA takes a couple of seconds per operation. This is fine if you're just doing bits and

FW: yubikey public key

2019-04-04 Thread Mead, Jennifer
Second try. From: Mead, Jennifer Sent: Monday, April 1, 2019 2:24 PM To: 'gnupg-users-requ...@gnupg.org' Subject: yubikey public key Hi Everyone, I got a yubikey 5 working with Gnupg agent by writing the key direct to the card on CentOS 7. Then I was tasked with writing documentation for

Re: card-sized 4 Kbit RSA Smartcard recommendation with 3 slots

2019-04-04 Thread Peter Lebbing
On 04/04/2019 14:06, Thomas Glanzmann wrote: > I'm looking for a recommendation for a cardsized 4 kbit RSA smartcard > with 3 keyslots Well, the ZeitControl card, which was the first OpenPGP Card on the market, is now at version 3.3 which would seem to support what you ask for.[1] I have no

Re: How to tell gpg not to start gpg-agent on a remote machines when using gpg agent forwarding

2019-04-04 Thread Peter Lebbing
On 04/04/2019 14:03, Thomas Glanzmann wrote: > Is there a configuration option that I can specify so that gpg gives > up is there is no socket or no agent behind a socket instead of > starting a new agent? From the man page: | --no-autostart | Do not start the gpg-agent or the dirmngr if

card-sized 4 Kbit RSA Smartcard recommendation with 3 slots

2019-04-04 Thread Thomas Glanzmann
Hello, I'm looking for a recommendation for a cardsized 4 kbit RSA smartcard with 3 keyslots which works with Linux und Windows and gnupg. Has anyone a recommendation. At the moment I use yubikey but I aquired a laptop with a smartcard reader that I would like to use in order to free up an USB

How to tell gpg not to start gpg-agent on a remote machines when using gpg agent forwarding

2019-04-04 Thread Thomas Glanzmann
Hello, I'm using gpg using gpg agent forwarding over ssh on a remote system. Sometimes my agent socket is not available. If I start any gpg operation, it starts a new agent. Is there a configuration option that I can specify so that gpg gives up is there is no socket or no agent behind a socket