Forwarding scdaemon over SSH - is it possible?

Peter Lebbing peter at digitalbrains.com
Thu Jun 9 14:36:11 CEST 2016


On 09/06/16 13:09, Michael Fladischer wrote:
> Does anyone have an idea how i could trick gpg2 into using my socket to
> talk to my local scdaemon?

This sounds like a job for our new superhero the --extra-socket option
that gpg-agent gained recently. It is meant for forwarding agent
connections to remote hosts. The local agent will then create an
scdaemon process to communicate to your smartcard.

Think well on the security implications of letting the remote machine
access your locally installed private keys. Do you fully trust the
machine and anyone with access to the socket on the remote machine?

HTH,

Peter.

-- 
I use the GNU Privacy Guard (GnuPG) in combination with Enigmail.
You can send me encrypted mail if you want some privacy.
My key is available at <http://digitalbrains.com/2012/openpgp-key-peter>



More information about the Gnupg-users mailing list