james/yubikey.rs
Public Access
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

text about ssh-agent support

Browse Source
This commit is contained in:
Klas Lindfors
2014-12-09 15:02:30 +01:00
parent bddfa55403
commit bfee8a164e
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
doc/SSH_with_PIV_and_PKCS11.adoc
+12
View File
@@ -11,6 +11,8 @@ Prerequisites
* a YubiKey Neo with the PIV applet loaded * a YubiKey Neo with the PIV applet loaded
* the yubico-piv-tool software * the yubico-piv-tool software
* the OpenSC software * the OpenSC software
* OpenSSH
** on OS X for ssh-agent to work a newer OpenSSH than is delivered with the system
Steps Steps
----- -----
@@ -44,3 +46,13 @@ the target system.
6. Authenticate to the target system using the new key: 6. Authenticate to the target system using the new key:
$ ssh -I $OPENSC_LIBS/opensc-pkcs11.so user@remote.example.com $ ssh -I $OPENSC_LIBS/opensc-pkcs11.so user@remote.example.com
7. This can also be setup to work with ssh-agent: (Optional)
$ ssh-add -s $OPENSC_LIBS/opensc-pkcs11.so
+
NOTE: On OS X this typically requires installation of a third-party OpenSSH from Homebrew or the like and using that ssh-agent.
+
To See that the ssh-agent correctly finds that key and getting the public key in correct format:
$ ssh-add -L