<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hi All,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Even though I have had GPG and YubiKey running a few times on CentOS7 I lost all my notes and install guides. I am hung up on getting the public key from the YubiKey.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I wrote the gpg keys right on the yubikey, I can query and see that gnupg knows all about it and sees it as a card.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">/home/p42547/.gnupg/pubring.gpg<o:p></o:p></p>
<p class="MsoNormal">-------------------------------<o:p></o:p></p>
<p class="MsoNormal">pub 2048R/C5778901 2019-06-20<o:p></o:p></p>
<p class="MsoNormal">uid Jen Mead (yubikey) <jennifer.mead@pacificorp.com><o:p></o:p></p>
<p class="MsoNormal">sub 2048R/8293401A 2019-06-20<o:p></o:p></p>
<p class="MsoNormal">sub 2048R/A558FD7E 2019-06-20<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">[p42547@cswks20~] > gpg --list-secret-keys<o:p></o:p></p>
<p class="MsoNormal">/home/p42547/.gnupg/secring.gpg<o:p></o:p></p>
<p class="MsoNormal">-------------------------------<o:p></o:p></p>
<p class="MsoNormal">sec> 2048R/C5778901 2019-06-20<o:p></o:p></p>
<p class="MsoNormal"> Card serial no. = 0006 09042340<o:p></o:p></p>
<p class="MsoNormal">uid Jen Mead (yubikey) <jennifer.mead@pacificorp.com><o:p></o:p></p>
<p class="MsoNormal">ssb> 2048R/8293401A 2019-06-20<o:p></o:p></p>
<p class="MsoNormal">ssb> 2048R/A558FD7E 2019-06-20<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">[p42547@cswks20~] > ssh-add<o:p></o:p></p>
<p class="MsoNormal">[p42547@cswks20~] > ssh-add -l<o:p></o:p></p>
<p class="MsoNormal">error fetching identities for protocol 1: agent refused operation<o:p></o:p></p>
<p class="MsoNormal">2048 SHA256:dj02A/DHL0RKuJuMLBX14CaQ6RriT0uqY0sXqTNPoW4 cardno:000609042340 (RSA)<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">[p42547@cswks20~] > gpg --export-secret-keys $KEYID | openpgp2ssh $KEYID<o:p></o:p></p>
<p class="MsoNormal">We cannot handle encrypted secret keys. Skipping!<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I never encrypted this key. So why is it coming out encrypted?
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">gpg --export-secret-keys C5778901 gives me an asci file that then complains about not being openpgp it also is missing the cardno in the public file which tells the server to look at the yubikey for the matching key. I am more than confused.
Can anyone tell me how to properly get the public key off of the yubikey to present to other servers?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Regards,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Jennifer (Jen) Mead<o:p></o:p></p>
<p class="MsoNormal">Security Engineer<o:p></o:p></p>
<p class="MsoNormal">503.813.5373<o:p></o:p></p>
<p class="MsoNormal">Jennifer.Mead@pacificorp.com<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>