yubikey-agent

yubikey-agent copied to clipboard

Agent Refused Operation After upgrade to Monteray

1

Trying to troubleshoot an issue with Monteray. After the upgrade I started getting this issue: sign_and_send_pubkey: signing failed for ECDSA "YubiKey #REDACTED PIV Slot 9a" from agent: agent refused operation...

mosesrenegade

SSH: Agent Refused Operation

16

I have the following two devices: * Yubikey Nano | Firmware 5.12 * Yubikey 5C NFC | Firmware 5.2.7 My laptop is running Manjaro Linux (Kernel 5.10.70). Steps taken: 1....

bitmage

Is it possible to choose different algorithms while generating the keys ? Is "ecdsa-sha2-nistp256" considered secure ?I have seen online content which labels this algorithm insecure Ref: https://www.smartftp.com/en-us/support/kb/2725 https://materials.rangeforce.com/tutorial/2020/02/13/SSH-Audit/#:~:text=For%20example%2C%20the%20ecdsa%2Dsha2,SafeCurves%20website%20for%20more%20information.

icemanreddy

Clear notification once you've tapped the yubikey

1

On linux, you can get the notification id when you trigger a notification so you can clear it later instead of just depending on a timeout. Presumably there's a way...

psanford

Failure to detect Yubikey-C Bio edition

2

Yubico authenticator detects the key but ryubikey-agent doesn't detect the same. ``` # yubikey-agent -setup No YubiKeys detected! ``` OS : OSX 12.2.1 (21D62) yubikey-agent installed via brew 0.1.5

icemanreddy

Some way to get randomly generated management key

3

The use of the retired key slots of PIN protected metadata to store a randomly generated management key is a nice hack and better than the Yubikey management keys [derived...

dupuy26

custom touch policies

1

Some scripts I have will run several git commands sequentially... and for each command it'll ask me to touch the key. Would be nice to allow to use `TouchPolicyCached` -...

caarlos0

WIP: Support Ed25519 keys in setup

11

Thoughts on this? Would adjust dependency if/when https://github.com/go-piv/piv-go/pull/69 is accepted.

nickray

Add decryption agent functionality

5

I'm currently using the OpenPGP applet on my Yubikey for two things: SSH authentication and password decryption with pass. Given all the well-known UX issues with gpg and smart cards/hardware...

fmeum

Currently where there is seemingly no way to configure yubikey-agent to use a pinentry program other than /usr/bin/pinentry. Of course, `update-alternatives` or another symlink approach can be used where available...

wlcx