Thursday, December 29, 2022

Re: [new] age-plugin-yubikey

Thanks - this is OK sthen@ for someone to import



On 2022/12/29 16:02, Volker Schlecht wrote:
> Update with a brief MESSAGE is attached!
>
> On 12/29/22 15:53, Stuart Henderson wrote:
> > On 2022/12/29 14:30, Volker Schlecht wrote:
> > >
> > > > Works for me. Basically OK sthen for import, though it could probably do
> > > > with a RUN_DEPENDS on security/age, and possibly also worth adding a
> > > > one-line pkg/MESSAGE (or at least a quick note in DESCR) saying that
> > > > pcscd need to be running to use it?
> > >
> > > I can add both, however age-plugin-yubikey *does* run here without age, that
> > > is you can provision identities on a Yubikey with it.
> > >
> > > It also integrates with rage and other implementations of the age spec, none
> > > of which are in ports yet, but might be in the future.
> > >
> > > Also, the error message when pcscd isn't running is pretty obvious:
> > >
> > > Error: Error while communicating with YubiKey: PC/SC error
> > > Cause: The Smart card resource manager is not running
> > >
> > > Does a message or note really make sense then?
> >
> > If the error said "pcscd isn't running" then I'd agree. But it's all a
> > bit opaque and if someone isn't already familiar with the stack needed
> > for running this (for example, someone might be used to SSH with U2F
> > keys and could easily be forgiven for thinking it's a similar situation,
> > and that doesn't need anything external) I think it's useful to give
> > them a bit of a better nudge in the right direction.
> >

No comments:

Post a Comment