-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hi all!
A few days ago I started wondering whether it is possible to use my GPG key to authenticate myself to SSH (instead of using a regular SSH-key). (To be more correct: an Authentication subkey on my GPG key) I started Googling and found some information which learned me that it seems to be possible but that it is not really straight forward. During this search I learned about (amongst others) gpg-agent with the - --enable-ssh-support option and the gpgkey2ssh script. It seemed to me that I would be able to use my GPG keys to authenticate to SSH using gpg-agent. However, it did not work. (I also used the gpgkey2ssh script on my subkey so I could add it to the authorized_keys on the server) After some more trying and googling, I discovered monkeysphere [1]. While using this I could get it to work, by doing `monkeysphere subkey-to-ssh-agent`. However this seems to export the subkey as a passwordless version to hand it over to `ssh-add`. So this would have to be done everytime after restarting my X-session. Also it seems a bit duplicate when I'm using gpg-agent, which already knows about my gpg-keys, that it should export my key and then re-add it to gpg-agent with ssh-add. Is it somehow possible to 'automatically' use my GPG subkey for SSH session when I'm using GPG-Agent? Or am I missing something here? Please note that I'm using XFCE (Xubuntu) which uses Gnome-Keyring by default so that might possibly also interfere with some of this. [1] http://web.monkeysphere.info/getting-started-user/ Thx for any help! Jeroen - -- website: http://budts.be/ - twitter: @teranex ___________________________________ Registered Linux User #482240 - GetFirefox.com - ubuntu.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.17 (GNU/Linux) iQIcBAEBCAAGBQJQDFoFAAoJEBrqc/v4ufiMn4gP/3dyu3L/2Oa7gAANqAr0WlQg cnotzD/CFhhQ14cc9qVYVQ/FaSO5nCU5GuyHhMV/vFHCyOAxOF4NpSDDXcioJnbJ jEBI2HM2kliHQrKtx9GkWXr/YCDadmqmIWUD47R8u4fAbeQMVvbynB2TIkBf756Z CbSZT7rBxDt+whBOzo5t6VW9FO+cAx62GQzGRILoxnx7gQeqztyNxOb1CK905FKU n5wdxxgXL0MfvihBuU/8Fmt6MzVUS/3eWCCK74IjxALlVTdS/ezlHrk7/P/ZJ7oL tP8+E+Xp5hVoD/iNxY3k1PbEZgqfJk7EDoTBZ9Bm9Y861vuJPZrzjJfTiCCyzkEh SmQ/rMjFfSt49DN1B4W8/lwnDcBqVUv/s5NzF9vRUgol9goxif1GCcIdDzK3I2GY gOzvhhmfSlT0qWI25Q4TaarBttB4xgHKhMIGl6Fq5jSzH2MUsNnIs1muNb/won9f gQajQUq2+IPL9WV1yFmLF6d90kFRZpXm3s3s4ZVcQSfcAS4VY8zvOAk3d2tfIlEF nPtUZ/dIr5qGsCravz8W7oKdjP15fmzXHlgpFEUM30nJzXfX5Z2E0eGOBmkQUFGn gKeFGndTnuKlhuIQaygJoIFNZGek6MdxH7NqHxjemT4e38PtdvPzGO3vD5+iQv5d lmqMJAlPJ0Xs7OGOzdoP =A8Fs -----END PGP SIGNATURE----- _______________________________________________ Gnupg-users mailing list [email protected] http://lists.gnupg.org/mailman/listinfo/gnupg-users
