Windows GPG 2.22.2: ERR 100663354 No data

2020-08-31 Thread Ave Milia via Gnupg-users
Windows, GPG 2.22.2 from chocolatey (choco install gnupg) While trying to setup gpg-agent to work with SSH key on Yubikey on Windows I have noticed (perhaps unrelated) issue: PS C:\Users\avemilia> gpgconf.exe --kill all PS C:\Users\avemilia> gpgconf.exe --launch all PS C:\Users\avemilia> echo

Re: Windows GPG 2.22.2: ERR 100663354 No data

2020-09-02 Thread Ave Milia via Gnupg-users
, August 31, 2020 11:03 PM, Ave Milia via Gnupg-users wrote: > Windows, GPG 2.22.2 from chocolatey (choco install gnupg) > > While trying to setup gpg-agent to work with SSH key on Yubikey on Windows I > have noticed (perhaps unrelated) issue: > > PS C:\Users\avemilia> g

Unable to RemoteForward Yubikey: gpg: error getting version from 'scdaemon': Forbidden

2020-09-02 Thread Ave Milia via Gnupg-users
I am trying to forward gpg-agent from Windows (local) to Linux (remote) in order to use Yubikey in full capacity on the remote. That means I am able to encrypt, decrypt, sign with gpg key stored on the token, use ssh key stored on the token for authentication in remote's environment. On

The infinite struggle of Yubikey, GPG and SSH

2020-08-22 Thread Ave Milia via Gnupg-users
What I want: Yubikey contains GPG subkeys. Master key is elsewhere. SSH is controlled by GPG agent. SSH key from Yubikey is automatically enrolled and used for connection to git remote. And it "just works". It's been two weeks that I can't get to that point, so I decided to ask for help here.

Re: The infinite struggle of Yubikey, GPG and SSH

2020-08-22 Thread Ave Milia via Gnupg-users
On Saturday, August 22, 2020 6:09 PM, Ave Milia via Gnupg-users wrote: > What I want: Yubikey contains GPG subkeys. Master key is elsewhere. SSH is > controlled by GPG agent. SSH key from Yubikey is automatically enrolled and > used for connection to git remote. And it "just wor

Optimal workflow with GPG signatures from multiple parties

2023-03-04 Thread Ave Milia via Gnupg-users
Hi list, We have a build server, it stores a private key and is capable of signing the resulting build artifact. The artifact then gets verified in the target environment during installation. There are multiple issues with current approach: 1. A random developer cannot trigger a build on the