| Commit message (Collapse) | Author | Files | Lines | ||
|---|---|---|---|---|---|
| 2024-10-26 | Passphrase now passed to gpg from stdin via the --passphrase-fd 0 option ↵ | forbytten | 1 | -8/+8 | |
| instead of via the --passphrase option. The latter exposes the passphrase to observation by other processes on the system and the gpg man page includes a disclaimer for it: Don't use this option if you can avoid it. Although the README recommends a single user, ephemeral Debian Live environment, users may choose to ignore that recommendation so it seems best to protect them from themselves where possible. | |||||
| 2024-08-18 | consolidate agent commands | drduh | 1 | -0/+1 | |
| 2024-08-18 | use printf, export keyid, fix link | drduh | 1 | -14/+5 | |
| 2024-08-17 | mail/thunderbird: fix typo | snqk | 1 | -1/+1 | |
| Signed-off-by: snqk <me@snqk.dev> | |||||
| 2024-08-17 | mail/thunderbird: add instructions & warnings | snqk | 1 | -0/+7 | |
| - add instructions to configure the thunderbird client with this setup - add warning for commonly encountered issues when decrypting emails (Resolves #448) Signed-off-by: snqk <me@snqk.dev> | |||||
| 2024-07-20 | Remove trailing whitespace in README.md | Justus Perlwitz | 1 | -2/+2 | |
| 2024-07-20 | Document how to test NixOS build with QEMU | Justus Perlwitz | 1 | -0/+13 | |
| 2024-07-06 | Corrected small typo in README.md | denis-roy | 1 | -1/+1 | |
| maintenace -> maintenance | |||||
| 2024-06-30 | Should only have one identity loaded when renewing | drduh | 1 | -1/+1 | |
| 2024-06-30 | Renew expired subkeys, fix #442 | drduh | 1 | -1/+2 | |
| 2024-06-30 | Fix secret function | drduh | 1 | -2/+2 | |
| 2024-06-30 | Export variables throughout | drduh | 1 | -22/+23 | |
| 2024-05-05 | Move networking section to Optional hardening | straysheep-dev | 1 | -67/+64 | |
| 2024-05-03 | Export the `GNUPGHOME` variable | Manuel Thalmann | 1 | -1/+1 | |
| Merging this PR will fix #434 | |||||
| 2024-04-18 | Add networking section to README.md | straysheep-dev | 1 | -2/+67 | |
| 2024-03-29 | Tidy style and formatting | drduh | 1 | -15/+14 | |
| 2024-03-25 | Fix broken 'SSH agent forwarding' internal links | Will Stephenson | 1 | -3/+3 | |
| 2024-03-24 | Remove NEO (discontinued in 2018), sort troubleshooting | drduh | 1 | -9/+7 | |
| 2024-03-24 | Update LUKS link, make commands consistent, more passphrase guidance | drduh | 1 | -49/+67 | |
| 2024-03-24 | Optional hardening section, additional validation steps | drduh | 1 | -159/+160 | |
| 2024-03-19 | Fix typo in date command | Will Stephenson | 1 | -1/+1 | |
| 2024-03-17 | Add command-line passphrase template | drduh | 1 | -1/+9 | |
| 2024-03-17 | Replace mkdir commands | drduh | 1 | -1/+17 | |
| 2024-03-17 | Install yubikey-manager directly on Debian | drduh | 1 | -39/+5 | |
| 2024-03-17 | Simplify and automate fdisk commands | drduh | 1 | -112/+92 | |
| 2024-03-17 | Stick with 6/8 digit PINs | drduh | 1 | -17/+12 | |
| 2024-03-17 | Remove obsolete stuff, clean up intro | drduh | 1 | -19/+11 | |
| 2024-03-17 | Move keyserver instructions to later, more batch commands | drduh | 1 | -82/+74 | |
| 2024-03-16 | Automate PIN and card operations | drduh | 1 | -120/+88 | |
| 2024-03-16 | Simplify instructions, reduce manual labor | drduh | 1 | -1137/+548 | |
| 2024-03-10 | formatting fix | drduh | 1 | -2/+2 | |
| 2024-03-10 | Workaround for Authenticate key issue | drduh | 1 | -8/+8 | |
| 2024-03-07 | update gpg --quick-add-key commands | Csanad Beres | 1 | -4/+5 | |
| it seems to be only accepting fingerprints and rejecting key ID-s | |||||
| 2024-02-12 | few more standard terms | drduh | 1 | -5/+5 | |
| 2024-02-12 | typo | drduh | 1 | -1/+1 | |
| 2024-02-12 | few more style nits | drduh | 1 | -15/+9 | |
| 2024-02-12 | explicit keytocard instructions | drduh | 1 | -34/+13 | |
| 2024-02-12 | simplify batch instructions | drduh | 1 | -30/+12 | |
| 2024-02-12 | standard names for subkeys | drduh | 1 | -51/+56 | |
| 2024-02-12 | remove yubikey as rng | drduh | 1 | -11/+0 | |
| 2024-02-12 | remove multiple hosts | drduh | 1 | -102/+39 | |
| 2024-02-11 | more grammar | drduh | 1 | -45/+19 | |
| 2024-02-11 | few more cleanups | drduh | 1 | -42/+112 | |
| 2024-02-11 | simplify console output, use generic info | drduh | 1 | -477/+203 | |
| 2024-02-11 | more grammar and formatting | drduh | 1 | -127/+118 | |
| 2024-02-11 | grammar and style | drduh | 1 | -195/+149 | |
| 2024-02-11 | grammar and standardize storage terminology | drduh | 1 | -141/+156 | |
| 2024-02-11 | standardize Certify/Subkeys, easier command copy, organize links | drduh | 1 | -424/+409 | |
| 2024-02-11 | fix rookie mistake | Phill Kelley | 1 | -1/+1 | |
| Add a one-liner that works. Then think about the context and decide to recommend a rearrangement. And then muck up the consequential adjustment of the original one-liner. I think I got a badge for that in the scouts. Well spotted. Sorry. Signed-off-by: Phill Kelley <34226495+Paraphraser@users.noreply.github.com> | |||||
| 2024-02-10 | add step to set `disable-ccid` in `scdaemon.conf` | Phill Kelley | 1 | -1/+21 | |
| Issue #404 reports "GPG acts like my YubiKey isn't plugged in". With GnuPG 2.3 and later, the system can get into a loop where it prompts for insertion of a YubiKey even though that YubiKey is already connected. The solution for this is to set `disable-ccid` in `~/.gnupg/scdaemon.conf`. Testing suggests setting `disable-ccid` does not interfere with earlier versions of GnuPG (eg 2.2.27 on Debian Bullseye or 2.2.40 on Debian Bookworm). This problem has also been mentioned in #277 and #256. Including a step in the Guide to set `disable-ccid` may help minimise recurrence. Also takes the opportunity to ensure `~/.gnupg` directory exists on a new system before downloading `gpg.conf`. References: * Ludovic Rousseau - [GnuPG and PC/SC conflicts](https://ludovicrousseau.blogspot.com/2019/06/gnupg-and-pcsc-conflicts.html) * GnuPG.org: - [Scdaemon Options](https://www.gnupg.org/documentation/manuals/gnupg/Scdaemon-Options.html#index-disable_002dccid) * YubiCo: - [Resolving GPG's CCID conflicts](https://support.yubico.com/hc/en-us/articles/4819584884124-Resolving-GPG-s-CCID-conflicts) - [Troubleshooting Issues with GPG](https://support.yubico.com/hc/en-us/articles/360013714479-Troubleshooting-Issues-with-GPG) * Closed issues: - [277 pcscd: Error Reader Exclusive](https://github.com/drduh/YubiKey-Guide/issues/277) - [256 Update scdaemon.conf for gnupg 2.3 with MacOS (and possibly others)](https://github.com/drduh/YubiKey-Guide/issues/256) Fixes #404 Signed-off-by: Phill Kelley <34226495+Paraphraser@users.noreply.github.com> | |||||
 |
index : YubiKey-Guide | |
| Guide to using YubiKey for GPG and SSH | drduh |
| aboutsummaryrefslogtreecommitdiffstatshomepage |