aboutsummaryrefslogtreecommitdiffstatshomepage
Commit message (Collapse)AuthorAgeFilesLines
...
| * annotate passphrase templatesdrduh2024-03-292-0/+4
|/
* Merge pull request #430 from wstephenson/masterdrduh2024-03-251-3/+3
|\ | | | | Fix broken 'SSH agent forwarding' internal links
| * Fix broken 'SSH agent forwarding' internal linksWill Stephenson2024-03-251-3/+3
|/
* Merge remote-tracking branch 'origin'drduh2024-03-240-0/+0
|\
| * Merge pull request #428 from drduh/wip-24mar24drduh2024-03-241-205/+222
| |\ | | | | | | Optional hardening section, additional validation steps
* | | Replace reset PIN with date, keyid, serial fields in passphrase templatesdrduh2024-03-242-446/+386
| |/ |/|
* | Remove NEO (discontinued in 2018), sort troubleshootingdrduh2024-03-241-9/+7
| |
* | Update LUKS link, make commands consistent, more passphrase guidancedrduh2024-03-241-49/+67
| |
* | Optional hardening section, additional validation stepsdrduh2024-03-241-159/+160
|/
* Merge pull request #427 from wstephenson/masterdrduh2024-03-201-1/+1
|\ | | | | Fix typo in date command
| * Fix typo in date commandWill Stephenson2024-03-191-1/+1
|/
* Merge pull request #426 from drduh/wip-17mar24drduh2024-03-183-1/+453
|\ | | | | Add plaintext passphrase template
| * Add command-line passphrase templatedrduh2024-03-173-1/+453
|/
* Merge pull request #425 from drduh/wip-16mar24drduh2024-03-186-1475/+1933
|\ | | | | Simplify instructions, reduce manual labor
| * Replace mkdir commandsdrduh2024-03-171-1/+17
| |
| * Install yubikey-manager directly on Debiandrduh2024-03-171-39/+5
| |
| * Simplify and automate fdisk commandsdrduh2024-03-171-112/+92
| |
| * Stick with 6/8 digit PINsdrduh2024-03-171-17/+12
| |
| * Remove obsolete stuff, clean up introdrduh2024-03-171-19/+11
| |
| * Move keyserver instructions to later, more batch commandsdrduh2024-03-172-82/+88
| |
| * Automate PIN and card operationsdrduh2024-03-161-120/+88
| |
| * Simplify instructions, reduce manual labordrduh2024-03-165-1200/+1735
|/
* Merge pull request #423 from Xronophobe/fix/quick-add-key-with-fprdrduh2024-03-111-4/+5
|\ | | | | update gpg --quick-add-key commands
| * update gpg --quick-add-key commandsCsanad Beres2024-03-071-4/+5
| | | | | | | | it seems to be only accepting fingerprints and rejecting key ID-s
* | Merge pull request #424 from drduh/wip-10mar24drduh2024-03-101-8/+8
|\ \ | |/ |/| Address restriction on subkey
| * formatting fixdrduh2024-03-101-2/+2
| |
| * Workaround for Authenticate key issuedrduh2024-03-101-8/+8
|/
* Merge pull request #420 from drduh/fix-metadatadrduh2024-02-122-5/+5
|\ | | | | fix batch metadata
| * fix batch metadatadrduh2024-02-122-5/+5
|/
* Merge pull request #419 from drduh/wip-12feb24drduh2024-02-121-122/+82
|\ | | | | 12feb24
| * few more standard termsdrduh2024-02-121-5/+5
| |
| * typodrduh2024-02-121-1/+1
| |
| * few more style nitsdrduh2024-02-121-15/+9
| |
| * explicit keytocard instructionsdrduh2024-02-121-34/+13
| |
| * simplify batch instructionsdrduh2024-02-121-30/+12
| |
| * standard names for subkeysdrduh2024-02-121-51/+56
| |
* | Merge pull request #418 from drduh/wip-12feb24drduh2024-02-121-11/+0
|\| | | | | remove yubikey as rng
| * remove yubikey as rngdrduh2024-02-121-11/+0
|/
* Merge pull request #417 from drduh/wip-11feb24drduh2024-02-121-1202/+854
|\ | | | | 11feb24
| * remove multiple hostsdrduh2024-02-121-102/+39
| |
| * more grammardrduh2024-02-111-45/+19
| |
| * few more cleanupsdrduh2024-02-111-42/+112
| |
| * simplify console output, use generic infodrduh2024-02-111-477/+203
| |
| * more grammar and formattingdrduh2024-02-111-127/+118
| |
| * grammar and styledrduh2024-02-111-195/+149
| |
| * grammar and standardize storage terminologydrduh2024-02-111-141/+156
| |
| * standardize Certify/Subkeys, easier command copy, organize linksdrduh2024-02-111-424/+409
|/
* Merge pull request #416 from Paraphraser/20240210-disable-ccid-masterdrduh2024-02-111-1/+21
|\ | | | | add step to set `disable-ccid` in `scdaemon.conf`
| * fix rookie mistakePhill Kelley2024-02-111-1/+1
| | | | | | | | | | | | | | | | | | | | Add a one-liner that works. Then think about the context and decide to recommend a rearrangement. And then muck up the consequential adjustment of the original one-liner. I think I got a badge for that in the scouts. Well spotted. Sorry. Signed-off-by: Phill Kelley <34226495+Paraphraser@users.noreply.github.com>
| * add step to set `disable-ccid` in `scdaemon.conf`Phill Kelley2024-02-101-1/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Issue #404 reports "GPG acts like my YubiKey isn't plugged in". With GnuPG 2.3 and later, the system can get into a loop where it prompts for insertion of a YubiKey even though that YubiKey is already connected. The solution for this is to set `disable-ccid` in `~/.gnupg/scdaemon.conf`. Testing suggests setting `disable-ccid` does not interfere with earlier versions of GnuPG (eg 2.2.27 on Debian Bullseye or 2.2.40 on Debian Bookworm). This problem has also been mentioned in #277 and #256. Including a step in the Guide to set `disable-ccid` may help minimise recurrence. Also takes the opportunity to ensure `~/.gnupg` directory exists on a new system before downloading `gpg.conf`. References: * Ludovic Rousseau - [GnuPG and PC/SC conflicts](https://ludovicrousseau.blogspot.com/2019/06/gnupg-and-pcsc-conflicts.html) * GnuPG.org: - [Scdaemon Options](https://www.gnupg.org/documentation/manuals/gnupg/Scdaemon-Options.html#index-disable_002dccid) * YubiCo: - [Resolving GPG's CCID conflicts](https://support.yubico.com/hc/en-us/articles/4819584884124-Resolving-GPG-s-CCID-conflicts) - [Troubleshooting Issues with GPG](https://support.yubico.com/hc/en-us/articles/360013714479-Troubleshooting-Issues-with-GPG) * Closed issues: - [277 pcscd: Error Reader Exclusive](https://github.com/drduh/YubiKey-Guide/issues/277) - [256 Update scdaemon.conf for gnupg 2.3 with MacOS (and possibly others)](https://github.com/drduh/YubiKey-Guide/issues/256) Fixes #404 Signed-off-by: Phill Kelley <34226495+Paraphraser@users.noreply.github.com>