diff options
| author | drduh <github@duh.to> | 2024-11-03 18:21:56 +0000 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-11-03 18:21:56 +0000 |
| commit | dea24f4fa0b6a543788c51dde8dfaf77cf9cffca (patch) | |
| tree | ed34bb3be35981193d1e9d40e9f44f111d7b3e0e /README.md | |
| parent | Merge pull request #462 from xty/patch-1 (diff) | |
| parent | Passphrase now passed to gpg from stdin via the --passphrase-fd 0 option inst... (diff) | |
| download | YubiKey-Guide-dea24f4fa0b6a543788c51dde8dfaf77cf9cffca.tar.gz | |
Merge pull request #463 from forbytten/gpg_passphrase_fd_0
Pass passphrase to gpg using --passphrase-fd 0
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 16 |
1 files changed, 8 insertions, 8 deletions
@@ -393,7 +393,7 @@ Do not set an expiration date on the Certify key. Generate the Certify key: ```console -gpg --batch --passphrase "$CERTIFY_PASS" \ +echo "$CERTIFY_PASS" | gpg --batch --passphrase-fd 0 \ --quick-generate-key "$IDENTITY" "$KEY_TYPE" cert never ``` @@ -413,7 +413,7 @@ Use the following command to generate Signature, Encryption and Authentication S ```console for SUBKEY in sign encrypt auth ; do \ - gpg --batch --pinentry-mode=loopback --passphrase "$CERTIFY_PASS" \ + echo "$CERTIFY_PASS" | gpg --batch --pinentry-mode=loopback --passphrase-fd 0 \ --quick-add-key "$KEYFP" "$KEY_TYPE" "$SUBKEY" "$EXPIRATION" done ``` @@ -442,12 +442,12 @@ ssb rsa4096/0xAD9E24E1B8CB9600 2024-01-01 [A] [expires: 2026-05-01] Save a copy of the Certify key, Subkeys and public key: ```console -gpg --output $GNUPGHOME/$KEYID-Certify.key \ - --batch --pinentry-mode=loopback --passphrase "$CERTIFY_PASS" \ +echo "$CERTIFY_PASS" | gpg --output $GNUPGHOME/$KEYID-Certify.key \ + --batch --pinentry-mode=loopback --passphrase-fd 0 \ --armor --export-secret-keys $KEYID -gpg --output $GNUPGHOME/$KEYID-Subkeys.key \ - --batch --pinentry-mode=loopback --passphrase "$CERTIFY_PASS" \ +echo "$CERTIFY_PASS" | gpg --output $GNUPGHOME/$KEYID-Subkeys.key \ + --batch --pinentry-mode=loopback --passphrase-fd 0 \ --armor --export-secret-subkeys $KEYID gpg --output $GNUPGHOME/$KEYID-$(date +%F).asc \ @@ -1825,8 +1825,8 @@ export EXPIRATION=2y Renew the Subkeys: ```console -gpg --batch --pinentry-mode=loopback \ - --passphrase "$CERTIFY_PASS" --quick-set-expire "$KEYFP" "$EXPIRATION" \ +echo "$CERTIFY_PASS" | gpg --batch --pinentry-mode=loopback \ + --passphrase-fd 0 --quick-set-expire "$KEYFP" "$EXPIRATION" \ $(gpg -K --with-colons | awk -F: '/^fpr:/ { print $10 }' | tail -n "+2" | tr "\n" " ") ``` |