Joonas Kuorilehto
Joonas Kuorilehto
You won’t like the implementation but bear with me: possibly you could consider generating the client configs as QR code while at it. Makes it super easy to add mobile...
I think that using only Unicode sounds like a great idea in 2017. 🎉 For the record (while I wouldn't use it), shouldn't it still be possible to use _screen_...
What I had in mind is to dump all Ansible managed peers to a file - that only includes the public keys and requires generating the top part of the...
Basically, with the controller having private keys it changes what would otherwise require an active attack to just making a copy of the private keys passively. The less stored the...
I have a proof-of-concept of the second no-touch key in my fork. I implemented both key-generation and support for the ssh-agent. I don't mind if someone wants to take this...
@FiloSottile I know you're hesitant about adding more complexity to the setup but what do you think about the agent-side changes? Would it be ok to iterate all connected Yubikeys...
@hlidotbe can you test #27?
@hlidotbe I tried to find an error and I can't see any way you'd get that error from my change. Maybe I'm missing something? Or, perhaps you have an older...
@hlidotbe Ok I was wrong. I suspect the error you see is because you haven't generated certificate on the other slot. I changed my PR to now load all 4...
I opened a new cleaner PR looking for feedback.