Would it be possible (or would patches be accepted) to talk to the GnuPG scdaemon instead? This would let me use gpg-agent to sign and encrypt.
Show HN: Yubikey-agent – an easy to use Go ssh-agent for YubiKeys
21–30 of 53 posts
Re: Show HN: Yubikey-agent – an easy to use Go ssh-agent for YubiKeys
#22I have been trying to use Yubikey for SSH over the years, and everything has been a huge hassle that just didn't work well enough. Everything, that is, until SSH 8.2 came out. Using a Yubikey (or any other U2F-compatible key, which is a lot of them) is a breeze: Run `ssh-keygen -t ecdsa-sk -f ~/.ssh/id_ecdsa_sk` to generate a key from your Yubikey and you're done. You can even use Resident Keys mode (if your key supp…
I use gpg-agent, but I agree it is often a pain. I will probably switch to U2F + SSH once more servers have OpenSSH 8.2.
Do you know if this already works with GitHub?
Re: Show HN: Yubikey-agent – an easy to use Go ssh-agent for YubiKeys
#23Earlier quoted context omitted.
I'm really excited about the next SoloKey coming out soon.
Thank you for the alternative. Sadly it doesn't support SSH or GPG keys, does it? That was one of the selling points of the OnlyKey for me (and it being open source of course).
Based on their blog post they are working on supporting PIV / PKCS#11 which would support SSH Keys and AES operations.
https://solokeys.com/blogs/news/update-on-our-new-and-upcomi...
[Edit removed it to be more specific]
Re: Show HN: Yubikey-agent – an easy to use Go ssh-agent for YubiKeys
#24I have been trying to use Yubikey for SSH over the years, and everything has been a huge hassle that just didn't work well enough. Everything, that is, until SSH 8.2 came out. Using a Yubikey (or any other U2F-compatible key, which is a lot of them) is a breeze: Run `ssh-keygen -t ecdsa-sk -f ~/.ssh/id_ecdsa_sk` to generate a key from your Yubikey and you're done. You can even use Resident Keys mode (if your key supp…
I use gpg-agent, but I agree it is often a pain. I will probably switch to U2F + SSH once more servers have OpenSSH 8.2. Do you know if this already works with GitHub?
I don't, and I doubt it (there would be an announcement), but it will be great when it does.
Re: Show HN: Yubikey-agent – an easy to use Go ssh-agent for YubiKeys
#25I have been trying to use Yubikey for SSH over the years, and everything has been a huge hassle that just didn't work well enough. Everything, that is, until SSH 8.2 came out. Using a Yubikey (or any other U2F-compatible key, which is a lot of them) is a breeze: Run `ssh-keygen -t ecdsa-sk -f ~/.ssh/id_ecdsa_sk` to generate a key from your Yubikey and you're done. You can even use Resident Keys mode (if your key supp…
Can such a key be used as an aws key?
Re: Show HN: Yubikey-agent – an easy to use Go ssh-agent for YubiKeys
#26Ok so this is neat; while the newest openssh client/server directly supports u2f keys, this is a badass shim that creates NIST-p256 compatible keys that are backed by a YubiKey.... man I wish this was a thing about 2-3 years ago!
Personally I've been using gpg-agent for a 2 years now without issues. It's also nice because your ssh key could be signed and be discoverable on public keyservers (like keybase), but I don't see any cloud providers having that integration yet.
Re: Show HN: Yubikey-agent – an easy to use Go ssh-agent for YubiKeys
#27I have been trying to use Yubikey for SSH over the years, and everything has been a huge hassle that just didn't work well enough. Everything, that is, until SSH 8.2 came out. Using a Yubikey (or any other U2F-compatible key, which is a lot of them) is a breeze: Run `ssh-keygen -t ecdsa-sk -f ~/.ssh/id_ecdsa_sk` to generate a key from your Yubikey and you're done. You can even use Resident Keys mode (if your key supp…
Can such a key be used as an aws key?
The public key? Sure, if the AWS SSH server supports the key type.
Re: Show HN: Yubikey-agent – an easy to use Go ssh-agent for YubiKeys
#28I have been trying to use Yubikey for SSH over the years, and everything has been a huge hassle that just didn't work well enough. Everything, that is, until SSH 8.2 came out. Using a Yubikey (or any other U2F-compatible key, which is a lot of them) is a breeze: Run `ssh-keygen -t ecdsa-sk -f ~/.ssh/id_ecdsa_sk` to generate a key from your Yubikey and you're done. You can even use Resident Keys mode (if your key supp…
> The downside is that both sides have to be running SSH 8.2+.
This is the problem. I was really excited for FIDO SSH keys, but LTS server distributions don't support it so it's going to take years for broad adoption.
Re: Show HN: Yubikey-agent – an easy to use Go ssh-agent for YubiKeys
#29I have been trying to use Yubikey for SSH over the years, and everything has been a huge hassle that just didn't work well enough. Everything, that is, until SSH 8.2 came out. Using a Yubikey (or any other U2F-compatible key, which is a lot of them) is a breeze: Run `ssh-keygen -t ecdsa-sk -f ~/.ssh/id_ecdsa_sk` to generate a key from your Yubikey and you're done. You can even use Resident Keys mode (if your key supp…
> The downside is that both sides have to be running SSH 8.2+. This is the problem. I was really excited for FIDO SSH keys, but LTS server distributions don't support it so it's going to take years for broad adoption.
Ubuntu LTS does support it, and it's already out. Servers are set to have the upgrade offered in a month, IIRC.
Re: Show HN: Yubikey-agent – an easy to use Go ssh-agent for YubiKeys
#30Hmm, gpg-agent has worked nicely for me. The biggest pain is that I have to reconfigure when I switch yubikey. (Yes, I have multiple keys with the same gpg key on each)
> The biggest pain is that I have to reconfigure when I switch yubikey.
This is planned to be fixed in GnuPG 2.3.