OpenPGP Smartcard and SSH ?!

Matthias Barmeier matthias.barmeier at sourcepark.de
Thu Apr 26 21:53:14 CEST 2007


Werner Koch wrote:
> On Wed, 25 Apr 2007 13:33, matthias.barmeier at sourcepark.de said:
> 
>> If I succeed I could send me my debian howto that will be used in my
>> company if you like !?
> 
> In general, yes.  However we need a copyright disclaimer as it should go
> into the manual. 
> 
No problem, suggest a license tyoe please because I am really
unexperienced with document licenses.

>> What could I check to find the setup bug ?
> 
> Add "debug 1024" to scdaemon.conf and define a log file for sdaemon.
> This allows to see the messages exchanged between scdaemon and gpg-agent.
> 
> You should see something like this:
> 
>   4 - 2007-04-26 14:05:01 scdaemon[2050.0] DBG: <- GETATTR $AUTHKEYID
>   4 - 2007-04-26 14:05:01 scdaemon[2050.0] DBG: -> S $AUTHKEYID OPENPGP.3
>   4 - 2007-04-26 14:05:01 scdaemon[2050.0] DBG: -> OK
>   4 - 2007-04-26 14:05:01 scdaemon[2050.0] DBG: <- GETATTR SERIALNO
>   4 - 2007-04-26 14:05:01 scdaemon[2050.0] DBG: -> S SERIALNO D27[...]
>   4 - 2007-04-26 14:05:01 scdaemon[2050.0] DBG: -> OK
>   4 - 2007-04-26 14:05:01 scdaemon[2050.0] DBG: <- READKEY OPENPGP.3
>   4 - 2007-04-26 14:05:01 scdaemon[2050.0] DBG: -> [ 44 20 28 31 [...]
>   4 - 2007-04-26 14:05:01 scdaemon[2050.0] DBG: -> OK
> 
> The $AUTHKEYID info is important - gpg-agent asks for it to see whether
> the card supports SSH authentication.  READKEY returns the the public
> key and is used to display the fingerprint with ssh-add -l
> 

SOLVED !

I reinstalled the gpgsm package because my scdaemon.conf were missing,
and after this everything works.

Thanks a lot !

Ciao
	Matze


-- 
-------------------------------------------------------
SOURCEPARK mbH Gesellschaft
für Softwareentwicklung

Dipl.-Inform. Matthias Barmeier
Helmholtzstr. 2 - 9, Gebäude 6 (M)
10587 Berlin

Tel.:   +49 (0) 30 / 39 80 68 30
Fax:    +49 (0) 30 / 39 80 68 39
e-mail: matthias.barmeier at sourcepark.de
www:    www.sourcepark.de
------------------------------------------------------

Diese Email kann vertrauliche und/oder rechtlich
geschützte Informationen enthalten. Wenn sie nicht der
richtige Adressat sind oder diese E-Mail irrtümlich
erhalten haben, informieren Sie bitte sofort den
Absender und vernichten Sie diese E-Mail. Das unerlaubte
Kopieren sowie die unbefugte Weitergabe dieser E-Mail
ist nicht gestattet.




More information about the Gnupg-users mailing list