Re: GPG key to authenticate to SSH?

2012-08-02 Thread Jeroen Budts
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/30/2012 11:50 AM, Werner Koch wrote: On Sun, 29 Jul 2012 21:39, jer...@budts.be said: enable a GPG key for SSH with gpg-agent 2.1. What I do not yet understand is how would add your public key to the authorized_keys file on the server?

Re: GPG key to authenticate to SSH?

2012-07-30 Thread Werner Koch
On Sun, 29 Jul 2012 21:39, jer...@budts.be said: enable a GPG key for SSH with gpg-agent 2.1. What I do not yet understand is how would add your public key to the authorized_keys file on the server? Wouldn't the gpgkey2ssh-script still be needed for ssh-add -L (capital L) prints the public

Re: GPG key to authenticate to SSH?

2012-07-29 Thread Jeroen Budts
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/25/2012 12:04 PM, Werner Koch wrote: On Tue, 24 Jul 2012 22:04, jer...@budts.be said: apparently they didn't work. Now I completely disabled 'Launch GNOME services on startup' in XFCE so gnome-keyring is not started anymore. Now I get

Re: GPG key to authenticate to SSH?

2012-07-26 Thread Werner Koch
On Wed, 25 Jul 2012 21:42, mailinglis...@hauke-laging.de said: tried first. Does gpg-agent currently care about the order of the entries? No, it does a plain readdir and only then checks whether the key is in sshcontrol: /* Fixme: We should better iterate over the control file and check

Re: GPG key to authenticate to SSH?

2012-07-25 Thread Werner Koch
On Tue, 24 Jul 2012 22:04, jer...@budts.be said: apparently they didn't work. Now I completely disabled 'Launch GNOME services on startup' in XFCE so gnome-keyring is not started anymore. Now I get the correct output from the above command. Please complain on the xfce and gnome lists and tell

Re: GPG key to authenticate to SSH?

2012-07-25 Thread Marco Steinacher
On 25.07.2012 12:04, Werner Koch wrote: On Tue, 24 Jul 2012 22:04, jer...@budts.be said: What I really wanted to accomplish here is to use my GPG authentication subkey for SSH authentication, without having to use an SSH-key at all. But it is still not clear to me how this can be

Re: GPG key to authenticate to SSH?

2012-07-25 Thread Daniel Kahn Gillmor
On 07/25/2012 07:49 AM, Marco Steinacher wrote: I think 'monkeysphere subkey-to-ssh-agent' will do the same with GnuPG versions before 2.1. See http://lists.gnupg.org/pipermail/gnupg-users/2009-July/036946.html yes, this is correct. It will extract the keygrip of your authentication subkey

Re: GPG key to authenticate to SSH?

2012-07-25 Thread Werner Koch
On Wed, 25 Jul 2012 19:12, d...@fifthhorseman.net said: reading sshcontrol's documentation in the texi doc, it occurs to me that this indication of which key should be used for ssh should in many use cases be visible to ssh servers as well. If for some reason the authentication-capable flag

Re: GPG key to authenticate to SSH?

2012-07-25 Thread Hauke Laging
Am Mi 25.07.2012, 21:19:08 schrieb Werner Koch: With capability flags in private-keys-v1.d we could add a wildcard entry into sshcontrol and automagically use all keys flaged as authenticate or use-for-ssh. However, I am not sure whether this is a good idea, given that ssh iterates over all

Re: GPG key to authenticate to SSH?

2012-07-24 Thread Jeroen Budts
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 07/23/2012 10:01 AM, Werner Koch wrote: On Sun, 22 Jul 2012 21:52, jer...@budts.be said: Is it somehow possible to 'automatically' use my GPG subkey for SSH session when I'm using GPG-Agent? Or am I missing something here? Install

Re: GPG key to authenticate to SSH?

2012-07-23 Thread Werner Koch
On Sun, 22 Jul 2012 21:52, jer...@budts.be said: --enable-ssh-support option and the gpgkey2ssh script. You don't need gpgkey2ssh - it is a relict form the early days. gpg-agent supports the ssh-agent protocol for 7 years now. Is it somehow possible to 'automatically' use my GPG subkey for

GPG key to authenticate to SSH?

2012-07-22 Thread Jeroen Budts
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi all! A few days ago I started wondering whether it is possible to use my GPG key to authenticate myself to SSH (instead of using a regular SSH-key). (To be more correct: an Authentication subkey on my GPG key) I started Googling and found some