Mastodawn

zhenech Jan 31

The year is 2026 and using GnuPG for storing an SSH key on a Yubikey still has the best UX?! What have we done wrong?!

Show thread

Antonis Chariton Feb 2

@zhenech I still vote for https://github.com/FiloSottile/yubikey-agent

GitHub - FiloSottile/yubikey-agent: yubikey-agent is a seamless ssh-agent for YubiKeys.

yubikey-agent is a seamless ssh-agent for YubiKeys. - FiloSottile/yubikey-agent

GitHub

Show thread

zhenech

@antonis The one not packaged in Fedora and not working with newer Yubikeys out of the box¹?

¹: https://github.com/FiloSottile/yubikey-agent/issues/153

Setup fails with changed defaults in recent Yubikeys · Issue #153 · FiloSottile/yubikey-agent

More recent Yubikey firmwares seem to default to AES instead of 3DES for the PIV management key, which causes the key generation to fail with a nondescript error message ‼️ The default Management K...

GitHub