mirrors
/
YubiKey-Guide
mirror of https://github.com/drduh/YubiKey-Guide
0
0
Fork 0
Code Releases Activity

Describe card serial number error

pull/179/head
Vladyslav Krylasov 2020-04-29 00:52:24 +01:00
parent 42085bb86b
commit 44d76ac5ab
1 changed files with 15 additions and 28 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

43
README.md
View File

@ -2117,38 +2117,24 @@ To use a single identity with multiple YubiKeys - or to replace a lost card with
$ gpg-connect-agent "scd serialno" "learn --force" /bye $ gpg-connect-agent "scd serialno" "learn --force" /bye
``` ```
Alternatively, you could manually delete the GnuPG shadowed key - where the card serial number is stored (see [GnuPG #T2291](https://dev.gnupg.org/T2291)). Alternatively, you could delete via a script the GnuPG shadowed key - where the card serial number is stored (see [GnuPG #T2291](https://dev.gnupg.org/T2291)).
Find the `Keygrip` number of each key: Put it somewhere in your `$PATH`. E.g.:
```console ```console
$ gpg --with-keygrip -k $KEYID $ cat >> ~/.scripts/remove-keygrips.sh <<EOF
pub rsa4096/0xFF3E7D88647EBCDB 2017-10-09 [C] #!/usr/bin/env bash
Key fingerprint = 011C E16B D45B 27A5 5BA8 776D FF3E 7D88 647E BCDB test ! "$@" && echo "Specify a key." && exit 1
Keygrip = 7A20855980A62C10569DE893157F38A696B1300E KEYGRIPS="$(gpg --with-keygrip --list-secret-keys $@ | grep Keygrip | awk '{print $3}')"
uid [ ultime ] Dr Duh <doc@duh.to> for keygrip in $KEYGRIPS
sub rsa4096/0xBECFA3C1AE191D15 2017-10-09 [S] [expires: 2018-10-09] do
Keygrip = 85D44BD52AD45C0852BD15BF41161EE9AE477398 rm "$HOME/.gnupg/private-keys-v1.d/$keygrip.key" 2> /dev/null
sub rsa4096/0x5912A795E90DD2CF 2017-10-09 [E] [expires: 2018-10-09] done
Keygrip = A0AA3D9F626BDEA3B833F290C7BCA79216C8A996
sub rsa4096/0x3F29127E79649A3D 2017-10-09 [A] [expires: 2018-10-09]
Keygrip = 7EF25A1115294342F451BC1CDD0FA94395F2D074
```
Delete all the shadow keys using their `Keygrip` number: gpg --card-status
EOF
```console $ chmod +x ~/.scripts/remove-keygrips.sh
$ cd ~/.gnupg/private-keys-v1.d $ remove-keygrips.sh $KEYID
$ rm 85D44BD52AD45C0852BD15BF41161EE9AE477398.key \
A0AA3D9F626BDEA3B833F290C7BCA79216C8A996.key \
7EF25A1115294342F451BC1CDD0FA94395F2D074.key
```
Insert the new YubiKey and re-generate shadow-keys by checking card status:
```console
$ gpg --card-status
``` ```
See discussion in Issues [#19](https://github.com/drduh/YubiKey-Guide/issues/19) and [#112](https://github.com/drduh/YubiKey-Guide/issues/112) for more information and troubleshooting steps. See discussion in Issues [#19](https://github.com/drduh/YubiKey-Guide/issues/19) and [#112](https://github.com/drduh/YubiKey-Guide/issues/112) for more information and troubleshooting steps.
@ -2280,6 +2266,7 @@ scd apdu 00 44 00 00
- If it still fails, it may be useful to stop the background `sshd` daemon process service on the server (e.g. using `sudo systemctl stop sshd`) and instead start it in the foreground with extensive debugging output, using `/usr/sbin/sshd -eddd`. Note that the server will not fork and will only process one connection, therefore has to be re-started after every `ssh` test. - If it still fails, it may be useful to stop the background `sshd` daemon process service on the server (e.g. using `sudo systemctl stop sshd`) and instead start it in the foreground with extensive debugging output, using `/usr/sbin/sshd -eddd`. Note that the server will not fork and will only process one connection, therefore has to be re-started after every `ssh` test.
- If you receive the error, `Please insert the card with serial number: *` see [management of multiple keys](#multiple-keys).
# Links # Links