diff options
| author | Zenithal <i@zenithal.me> | 2020-12-03 01:18:21 +0800 |
|---|---|---|
| committer | Zenithal <i@zenithal.me> | 2020-12-03 01:18:21 +0800 |
| commit | 7e49f5cc89cafcfd665375f5fde72e2a38039d04 (patch) | |
| tree | 56539178522aac5b31f967916fd11c58045771e7 /README.md | |
| parent | Correct WSL agent forwarding (diff) | |
| download | YubiKey-Guide-7e49f5cc89cafcfd665375f5fde72e2a38039d04.tar.gz | |
Add note on chained agent forwarding
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 4 |
1 files changed, 4 insertions, 0 deletions
@@ -2124,6 +2124,8 @@ After typing or sourcing your shell rc file, with `ssh-add -l` you should find y **Note** In this process no gpg-agent in the remote is involved, hence `gpg-agent.conf` in the remote is of no use. Also pinentry is invoked locally. +**Note** Agent forwarding may be chained through multiple hosts + ## GitHub You can use YubiKey to sign GitHub commits and tags. It can also be used for GitHub SSH authentication, allowing you to push, pull, and commit without a password. @@ -2332,6 +2334,8 @@ extra-socket /run/user/1000/gnupg/S.gpg-agent.extra **Important** Any pinentry program except `pinentry-tty` or `pinentry-curses` may be used. This is because local `gpg-agent` may start headlessly (By systemd without `$GPG_TTY` set locally telling which tty it is on), thus failed to obtain the pin. Errors on the remote may be misleading saying that there is *IO Error* (Yes internally there is actually *IO Error* since it happens when writing to/reading from tty while finding no tty to use, but for end users this is not friendly). +**Note** Agent forwarding may be chained through multiple hosts + See [Issue #85](https://github.com/drduh/YubiKey-Guide/issues/85) for more information and troubleshooting. # Using Multiple Keys |