Thursday, December 29, 2022

Re: [new] age-plugin-yubikey

Update with a brief MESSAGE is attached!

On 12/29/22 15:53, Stuart Henderson wrote:
> On 2022/12/29 14:30, Volker Schlecht wrote:
>>
>>> Works for me. Basically OK sthen for import, though it could probably do
>>> with a RUN_DEPENDS on security/age, and possibly also worth adding a
>>> one-line pkg/MESSAGE (or at least a quick note in DESCR) saying that
>>> pcscd need to be running to use it?
>>
>> I can add both, however age-plugin-yubikey *does* run here without age, that
>> is you can provision identities on a Yubikey with it.
>>
>> It also integrates with rage and other implementations of the age spec, none
>> of which are in ports yet, but might be in the future.
>>
>> Also, the error message when pcscd isn't running is pretty obvious:
>>
>> Error: Error while communicating with YubiKey: PC/SC error
>> Cause: The Smart card resource manager is not running
>>
>> Does a message or note really make sense then?
>
> If the error said "pcscd isn't running" then I'd agree. But it's all a
> bit opaque and if someone isn't already familiar with the stack needed
> for running this (for example, someone might be used to SSH with U2F
> keys and could easily be forgiven for thinking it's a similar situation,
> and that doesn't need anything external) I think it's useful to give
> them a bit of a better nudge in the right direction.
>

No comments:

Post a Comment