Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Add notations section | Stefano Figura | 2020-08-13 | 1 | -0/+25 |
| | |||||
* | Fix usage inconsistency | b1f6c1c4 | 2020-08-11 | 1 | -5/+5 |
| | | | | | Master key shall only be used to certify other keys. The usage indicator in README.md is inconsistently shown as SC and C. | ||||
* | Set touch policy to fixed. | Kenny MacDermid | 2020-05-27 | 1 | -3/+3 |
| | | | | | | | | | Setting the touch policy to `on` does not prevent the policy from later being turned off again. Setting it to `fixed` is more secure because it can not be turned off. If someone wants to disable the touch policy they can always restore the keys from the backups created in the guide. | ||||
* | Add information on potential PIN issues and how to debug them | Sebastian Schmieschek | 2020-05-27 | 1 | -2/+5 |
| | | | | | | | | | | I missed the error message when attempting to set a PIN of only 5 characters due to the UI repeating the options below it. Pinentry happily stores the bogus PIN and even counts down the retry counter when entering the correct (default) one. This can be resolved by unblocking the PIN. Once I ran the gpg-agent with debug output (a tip found in the added link), the issue was obvious. | ||||
* | Stack rank secure environment and add a few tips | drduh | 2020-05-25 | 1 | -19/+42 |
| | |||||
* | Merge pull request #185 from vald-phoenix/fix-borken-anchor | drduh | 2020-05-24 | 1 | -5/+5 |
|\ | | | | | Fix broken anchor | ||||
| * | Fix broken anchor | Vladyslav Krylasov | 2020-05-04 | 1 | -5/+5 |
| | | | | | | | | There are two anchors with the same name and this breaks navigation. | ||||
* | | Fix order of revocation command. | Max Mäusezahl | 2020-05-24 | 1 | -1/+1 |
| | | | | | | | | | | | | | | | | | | | | According to 'man gpg' the order of arguments should be gpg [--homedir name] [--options file] [options] command [args] In this case '--gen-revoke' is the command, '$KEYID' is an argument and '--output $GNUPGHOME/revoke.asc' is an option. Previously this was incorrect (option came first) and would spawn an error. | ||||
* | | Include --expert when editing master key | Mike Mazur | 2020-05-17 | 1 | -1/+1 |
|/ | | | | This is specifically during setup when rotating keys. | ||||
* | Clarified wording | Jason Stelzer | 2020-05-04 | 1 | -1/+1 |
| | |||||
* | GPG keys on multiple computers | Jason Stelzer | 2020-05-04 | 1 | -0/+1 |
| | | | | I feel like this took me longer to figure out than it should have. | ||||
* | Address throw-keyids issue with mailvelope to fix #178 | drduh | 2020-05-03 | 1 | -14/+18 |
| | |||||
* | Split export pubkey from backup to fix #175 | drduh | 2020-05-03 | 1 | -86/+95 |
| | |||||
* | Disambiguate backup volume label to fix #176. | drduh | 2020-05-03 | 1 | -77/+127 |
| | |||||
* | Merge pull request #180 from vald-phoenix/yubikey-reset-by-ykman | drduh | 2020-05-03 | 1 | -0/+6 |
|\ | | | | | Describe ykman PGP keys reset | ||||
| * | Describe ykman PGP keys reset | Vladyslav Krylasov | 2020-04-28 | 1 | -0/+6 |
| | | |||||
* | | Merge pull request #179 from vald-phoenix/multiple-yubikeys | drduh | 2020-05-03 | 1 | -28/+15 |
|\ \ | | | | | | | Describe card serial number error | ||||
| * | | Describe card serial number error | Vladyslav Krylasov | 2020-04-29 | 1 | -28/+15 |
| |/ | |||||
* | | Merge pull request #177 from apiraino/revoke-cert | drduh | 2020-05-03 | 1 | -0/+15 |
|\ \ | | | | | | | Add instructions to create a revoke certificate | ||||
| * | | Add instruction to create a revoke certificate | apiraino | 2020-04-28 | 1 | -0/+15 |
| |/ | |||||
* | | Merge pull request #170 from murphy83/Abort-Trick | drduh | 2020-05-03 | 1 | -0/+15 |
|\ \ | |/ |/| | Added some additonal text describing alternatives that may be used | ||||
| * | Added some additonal text describing alternatives that may be used | Murphy Laptop | 2020-03-02 | 1 | -0/+15 |
| | | |||||
* | | Add steps for renewing (not rotating) sub-keys | Daniel Sockwell | 2020-03-24 | 1 | -1/+102 |
|/ | | | | | | | | | | | | | As discussed in issue #164, the current section on Rotating Keys presents two alternatives: replacing the existing keys with a newly generated key or extending the validity of existing keys by changing their expiration. However, it only provides instructions for the first approach. This commit adds instructions for renewing sub-keys. I am far from an expert, and am submitting this change mostly in hopes that it will provide documentation for the next time I need to renew my sub-keys. I would welcome any changes or clarifications others would care to offer. | ||||
* | Bump Debian version, license year | drduh | 2020-02-12 | 1 | -8/+32 |
| | |||||
* | Merge pull request #160 from rvl/nixos | drduh | 2020-01-22 | 1 | -0/+51 |
|\ | | | | | Add instructions for NixOS | ||||
| * | Add instructions for NixOS | Rodney Lorrimar | 2020-01-22 | 1 | -0/+51 |
| | | | | | | | | I just tested these steps on a spare laptop. | ||||
* | | Merge pull request #159 from rvl/multiple-yubikeys | drduh | 2020-01-22 | 1 | -0/+16 |
|\ \ | | | | | | | Add more detail about what to do with multiple YubiKeys | ||||
| * | | Add more detail about what to do with multiple YubiKeys | Rodney Lorrimar | 2020-01-22 | 1 | -0/+16 |
| |/ | |||||
* / | Add information about setting the primary user ID | Rodney Lorrimar | 2020-01-22 | 1 | -0/+30 |
|/ | |||||
* | Fix gnupg package name for Arch | Andrea Scarpino | 2020-01-21 | 1 | -1/+1 |
| | | | `gnupg2` has been [removed since March 2012](https://lists.archlinux.org/pipermail/arch-dev-public/2012-March/022690.html) | ||||
* | fix broken links | wsyxbcl | 2020-01-12 | 1 | -4/+4 |
| | |||||
* | Update GitHub instructions on Windows | Mark Fayngersh | 2020-01-07 | 1 | -1/+2 |
| | | | Add command to instruct Git to use WinGPG | ||||
* | Formatting cleanup | drduh | 2019-12-30 | 1 | -23/+19 |
| | |||||
* | Use larger partition sizes to fix #149. | drduh | 2019-12-30 | 1 | -21/+22 |
| | |||||
* | Fix typo in table of contents link | gusttt | 2019-12-16 | 1 | -1/+1 |
| | |||||
* | Document issue #145 and fix #142 | drduh | 2019-12-14 | 1 | -12/+10 |
| | |||||
* | Fix url formatting | drduh | 2019-11-19 | 1 | -1/+1 |
| | |||||
* | Update Debian version and fix #137 | drduh | 2019-11-19 | 1 | -62/+66 |
| | |||||
* | Mention yubikey-touch-detector | Maxim Baz | 2019-11-17 | 1 | -1/+1 |
| | |||||
* | Added a fix for failing ssh / GUI pinentry | Emile 'iMil' Heitor | 2019-11-13 | 1 | -1/+1 |
| | |||||
* | Add --keyserver flag pointing to Debian keyserver | Kiel C | 2019-11-07 | 1 | -1/+1 |
| | | | Fixes #131 | ||||
* | Added important note about pin caching #135 | Sun Knudsen | 2019-10-19 | 1 | -0/+2 |
| | |||||
* | More lines with old debian version corrected | Jakub Skory | 2019-10-09 | 1 | -4/+4 |
| | |||||
* | New Debian version: 10.1.0 | Jakub Skory | 2019-10-09 | 1 | -1/+1 |
| | | | Before curl returned http/404 | ||||
* | Update VM option | Gary Johnson | 2019-09-27 | 1 | -5/+7 |
| | |||||
* | Update README.md | Gary Johnson | 2019-09-24 | 1 | -1/+1 |
| | | | Added primary source stating confirming that devices are read only in all but a few circumstances and that Keys ("secrets") cannot be read after being written to the device | ||||
* | Merge pull request #126 from vorburger/patch-2 | drduh | 2019-09-18 | 1 | -2/+5 |
|\ | | | | | clarify that SSH_AUTH_SOCK should only be set locally, not on the remote server | ||||
| * | put additional information into single line | Michael Vorburger ⛑️ | 2019-09-17 | 1 | -3/+1 |
| | | |||||
| * | clarify that SSH_AUTH_SOCK should only be set locally, not on the remote server | Michael Vorburger ⛑️ | 2019-09-16 | 1 | -2/+7 |
| | | |||||
* | | Merge pull request #128 from vorburger/patch-4 | drduh | 2019-09-17 | 1 | -1/+4 |
|\ \ | | | | | | | add 'sshd -eddd' Troubleshooting tip |