Pierre-Emmanuel, Edd,
Please find secruity/gnupg2 diff with updated README describing sample
YubiKey setup attached.
--
With best regards,
Pavel Korovin
Index: Makefile
===================================================================
RCS file: /cvs/ports/security/gnupg2/Makefile,v
retrieving revision 1.48
diff -u -p -r1.48 Makefile
--- Makefile 7 Apr 2017 16:21:53 -0000 1.48
+++ Makefile 23 Apr 2017 12:45:03 -0000
@@ -3,6 +3,7 @@
COMMENT = GNU privacy guard - a free PGP replacement
DISTNAME = gnupg-2.1.20
+REVISION = 0
CATEGORIES = security
MASTER_SITES = ${MASTER_SITE_GNUPG:=gnupg/}
Index: pkg/README
===================================================================
RCS file: /cvs/ports/security/gnupg2/pkg/README,v
retrieving revision 1.2
diff -u -p -r1.2 README
--- pkg/README 30 Sep 2012 16:28:07 -0000 1.2
+++ pkg/README 23 Apr 2017 12:45:03 -0000
@@ -5,4 +5,40 @@ $OpenBSD: README,v 1.2 2012/09/30 16:28:
+-----------------------------------------------------------------------
In order to use a card reader other than the few ones supported by
-GnuPG's internal CCID driver, the ccid package needs to be installed.
+GnuPG's internal CCID driver, the ccid, pcsc-lite and pcsc-tools packages
+need to be installed.
+
+Example YubiKey 4 setup procedure
+=================================
+
+Install required packages, enable and start pcscd(8) PC/SC smartcard daemon:
+
+ # pkg_add ccid pcsc-lite pcsc-tools
+ # rcctl enable pcscd
+ # rcctl start pcscd
+
+Find the reader with YubiKey:
+
+ $ pcsc_scan -n
+ PC/SC device scanner
+ V 1.4.27 (c) 2001-2011, Ludovic Rousseau <[email protected]>
+ Compiled with PC/SC lite version: 1.8.20
+ Using reader plug'n play mechanism
+ Scanning present readers...
+ 0: Yubico Yubikey 4 OTP+U2F+CCID 00 00
+
+ Sun Apr 23 15:15:40 2017
+ Reader 0: Yubico Yubikey 4 OTP+U2F+CCID 00 00
+ Card state: Card inserted, Exclusive Mode,
+ ATR: 3B F8 13 00 00 81 31 FE 15 59 75 62 69 6B 65 79 34 D4
+ #Ctrl+C
+
+Configure scdaemon(1) smartcard daemon to use this reader:
+
+ $ echo "reader-port \"Yubico Yubikey 4 OTP+U2F+CCID 00 0\"" >> \
+ ~/.gnupg/scdaemon.conf
+
+Check if the YubiKey is recognized by GnuPG:
+
+ $ gpg2 --card-status
+ Reader ...........: Yubico Yubikey 4 OTP U2F CCID 00 00