mirror/YubiKey-Guide
1
0
Fork 0
mirror of https://github.com/drduh/YubiKey-Guide.git synced 2026-02-22 04:45:18 +08:00
Code Issues Projects Releases Packages Wiki Activity Actions

Commit graph

  • 99b1f178de
         Merge 4d15a71e10 into 9778977fa2 Mateusz Kaczmarek 2026-02-01 19:12:35 +00:00
  • 4d15a71e10
         Make gpg-agent config work on both Mac architectures cyberbob 2026-02-01 20:09:48 +01:00
  • 53f930f764
         Merge 581162eebb into 9778977fa2 Mikail Gedik 2026-01-11 19:51:25 +01:00
  • 581162eebb Fix year in template mikail 2026-01-11 19:51:17 +01:00
  • f2dccd3001 Add scripts to generate txt and html templates mikail 2026-01-11 19:36:28 +01:00
  • 9778977fa2
         Merge pull request #527 from xty/patch-1 master drduh 2026-01-10 09:08:43 -08:00
  • 6f43839255
         Add gnupg2-scdaemon as a required package for Fedora XTY 2026-01-03 23:22:33 +08:00
  • 7513db34cc
         Merge pull request #525 from dennisxtria/patch-1 drduh 2025-12-13 09:09:04 -08:00
  • 40e47c3c02
         Revise markdown instructions in README Dennis Triantafyllis 2025-12-01 14:06:36 +02:00
  • 98fdcad708
         Merge pull request #524 from zeorin/feat/nix-update drduh 2025-11-01 08:22:38 -07:00
  • 3cbd8cae36
         Update all mkdir commands to create parent directories if necessary Xandor Schiefer 2025-10-27 09:26:03 +02:00
  • ba013d793a
         Update nix build commands Xandor Schiefer 2025-10-27 09:25:40 +02:00
  • bec44a6715
         Update Nix flake to latest 25.05 (current stable) Xandor Schiefer 2025-10-27 09:25:16 +02:00
  • adc41e5abc
         Merge pull request #523 from ajschmidt8/patch-1 drduh 2025-10-25 15:50:03 -07:00
  • fb28e84573
         Fix command to upload key to keys.openpgp.org AJ Schmidt 2025-10-22 15:34:37 -04:00
  • e8bc59e690
         Merge pull request #522 from meonkeys/keysigning-caveat drduh 2025-10-17 17:00:41 -07:00
  • 57998be067
         document keysigning issue with offline certify key Adam Monsen 2025-10-13 08:12:02 -07:00
  • 37296f7ae9
         Merge pull request #521 from dhl/update-fedora-deps drduh 2025-09-17 17:10:10 -07:00
  • 10d1a82356
         Merge pull request #520 from davidxia/patch-1 drduh 2025-09-17 17:09:30 -07:00
  • 8fe5399cb8
         fix: Remove non-essential dependencies for Fedora David Leung 2025-09-01 09:30:09 +08:00
  • 2b375e94f2
         fix two minor typos David Xia 2025-08-09 09:52:58 -04:00
  • 997ba48130
         Merge pull request #515 from davidxia/patch2 drduh 2025-07-29 23:57:05 +00:00
  • dc0797a987
         fix: use working command to get GPG public key David Xia 2025-07-29 13:14:38 -04:00
  • a089002e35
         Merge pull request #514 from davidxia/patch1 drduh 2025-07-28 01:02:18 +00:00
  • cb38022738
         Merge pull request #510 from Paraphraser/20250618-gpg-agent.conf-master drduh 2025-07-28 01:00:33 +00:00
  • 0dd1bf1393
         fix: add missing macOS brew command David Xia 2025-07-24 10:57:46 -04:00
  • 08a22f8bde
         Merge pull request #509 from drduh/wip-jun25 drduh 2025-06-18 23:58:31 +00:00
  • b365be4dc3
         2025-06-18 gpg-agent.conf better default pinentry-program behaviour Phill Kelley 2025-06-18 14:36:24 +10:00
  • 48fe57a24f increment stdout dates, cite ed25519 drduh 2025-06-17 18:57:42 -07:00
  • 76d557b0f6 set individual key types default to ed25519 for auth drduh 2025-06-15 14:08:13 -07:00
  • e974dbb95c create scripts dir before creating keygrips drduh 2025-06-15 13:36:09 -07:00
  • d446832705 explicit note on ed25519 auth subkeys to fix #507 drduh 2025-06-15 13:29:08 -07:00
  • d8ad5c469b split subkey gen command, note ed25519 auth drduh 2025-06-15 13:22:45 -07:00
  • 428d845214
         Merge pull request #502 from mattborja/guide-secure-environment drduh 2025-06-15 20:05:33 +00:00
  • 8c0a752934 implement fail function drduh 2025-06-15 13:01:56 -07:00
  • ca81deff35
         Merge pull request #508 from kurtmckee/fix-broken-link drduh 2025-06-07 21:03:30 +00:00
  • f5846c9cdc
         Fix a broken link Kurt McKee 2025-06-02 14:08:32 -05:00
  • bc9a7a8954
         Update verbiage for read flow (“obtained in advance”) Matt Borja 2025-05-23 02:49:49 +00:00
  • 7e3f6f7647
         Add missing closing parenthesis Matt Borja 2025-05-23 02:47:52 +00:00
  • 454cf8e0bf
         Include recommendation for sourcing offline copy of gpg.conf to avert needing an Internet connection in post Matt Borja 2025-05-23 02:47:09 +00:00
  • fbc9d4f517
         - Use dedicated section headings for Abstract and Disclaimer - Include MIT disclaimer and add copyright - Clarify use of tightly coupled process intended for offline package installation (bootable images already presumed to be verified through via external documentation) - Specify appropriate use of secure imaging host (imaging purposes only) - Provide link to Tails installation guide - Cleanup verbiage throughout using more direct procedural language - Rearrange paragraphs as needed to address disparities in logical flow of procedures, as in C/CD Considerations - Clarify hardware requirements for devices elected for air-gap use (e.g. SD card) - Reiterate verification requirements for Alpine Linux, citing both official sources and additional evidence sources - Add callout (3b) to fetch additional packages required for offlnie work in the air-gapped environment and thus rename gpg-bundle-* to airgap-bundle-* - Add explicit step to visually inspect and note SHA256 checksum of air-gap bundle before continuing (required for later verification) - Parameterize device paths when referencing use of removable storage medium - Note alternate use of repeating section 1.2.1 over current SD card (used for offline package retrieval) - Cleanup additional post-installation setup tasks introduced elsewhere in, else considered outside the scope of this document - Demonstrate use of && for requiring SHA256 to be valid before allowing air-gap bundle to be extracted and installed - Include sample command for listing key certifications during GPG environment verification (--list-sigs) Matt Borja 2025-05-19 17:43:14 +00:00
  • 67e63f5e40
         Cleanup Stage 1 introductory paragraph and rearrange "clean plate" analogy for logical flow Matt Borja 2025-05-19 07:46:47 +00:00
  • 8536df9cfc
         Rework Purpose section as Abstract and cleanup Matt Borja 2025-05-19 07:37:10 +00:00
  • dc2221e7de
         Add notes for restarting gpg-agent if connection to HSM is lost between $GNUPGHOME directories Matt Borja 2025-05-19 02:29:37 +00:00
  • 0d709dd9ba
         Update instructions for installing offline packages from removable storage after booting into the secure environment Matt Borja 2025-05-19 02:24:13 +00:00
  • bd96779276
         Cleanup remaining extraneous sections - 1.3 Building the Secure Environment Matt Borja 2025-05-19 02:18:47 +00:00
  • 8f31080af9
         Merge branch 'guide-secenv' into guide-secure-environment to sign last commit with current key only recognized by GitHub due to email field. Matt Borja 2025-05-19 02:09:11 +00:00
  • 1a7bc2ccf6
         Rework section introductory paragraphs for readability Begin reworking user stories as more procedural for brevity and procedural specificity (clarity) - Establishing a Secure Image Host - Use Tails OS as an Intermediary - Use the target OS to download packages - Acquire the target image - Boot the target image and download OS packages Matt Borja 2025-05-19 02:08:14 +00:00
  • acdbd14f8d
         Rework section introductory paragraphs for readability Matt Borja 2025-05-19 01:58:01 +00:00
  • 3cc423037b
         Fix minor spelling/grammar issues Matt Borja 2025-05-14 08:11:40 +00:00
  • ae6cac57f1
         Update headings: - Fix heading level for Stage 3 - Assign sub-headings Matt Borja 2025-05-14 08:04:29 +00:00
  • c0690e1c4c
         Import and cleanup notes for distribution Matt Borja 2025-05-14 07:51:20 +00:00
  • ece9752967
         Merge pull request #501 from drduh/wip-09may25 drduh 2025-05-11 23:56:11 +00:00
  • 7473d2e0d8 reuse key list for id/fp drduh 2025-05-10 17:59:19 -07:00
  • 04dbdf35c3 label each step drduh 2025-05-10 17:47:40 -07:00
  • d66ac5381f delint and print id strings drduh 2025-05-10 17:25:26 -07:00
  • f48c9fa3ee finish by printing certify and encrypt passphrases drduh 2025-05-10 17:08:04 -07:00
  • e457f04982 set passphrases function drduh 2025-05-10 16:57:30 -07:00
  • 1064d2e742 print configured id/key attributes drduh 2025-05-10 16:45:23 -07:00
  • 4fe4b8c157 temp dir and label functions drduh 2025-05-10 16:40:00 -07:00
  • cbd39ffbb0 save mats functions drduh 2025-05-10 16:31:51 -07:00
  • 1ab20d5fea gen key functions drduh 2025-05-10 16:27:14 -07:00
  • f2c4ca3e68 get pass function drduh 2025-05-10 16:21:48 -07:00
  • 4624d096a8 script generate commands drduh 2025-05-09 17:01:19 -07:00
  • a7b9a972c5
         Merge pull request #497 from mattborja/readme-gpgsign drduh 2025-05-06 23:55:03 +00:00
  • 0c30e143bf
         Update instructions for commit signing Matt Borja 2025-05-05 04:31:46 +00:00
  • b822d411aa
         Merge pull request #493 from drduh/wip-24apr25 drduh 2025-04-27 23:45:17 +00:00
  • a42d48cf68 a few more formatting fixes drduh 2025-04-24 20:07:41 -07:00
  • d7bb1a39e0 mention how to wrap double quotes to fix #492 drduh 2025-04-24 19:47:29 -07:00
  • 97cd88bf3f more grammar and alignment formatting drduh 2025-04-24 19:39:29 -07:00
  • dc9a0eb903 tidy formatting, align table drduh 2025-04-24 19:21:56 -07:00
  • 6552e8946d options to modify passphrase length, group size and delimiter drduh 2025-04-24 19:07:21 -07:00
  • 3912fc0f20
         Merge pull request #490 from drduh/wip-20apr25 drduh 2025-04-22 00:30:37 +00:00
  • 7d83cf9f13 update config refs drduh 2025-04-20 13:08:55 -07:00
  • 08cb724eab update nix readme reference to fix #486 drduh 2025-04-20 13:03:49 -07:00
  • 65f8efca51
         Merge pull request #488 from drduh/wip-19apr25 drduh 2025-04-20 19:00:25 +00:00
  • a2dd896d5c login card attr appears mandatory, fix #461 drduh 2025-04-19 09:16:03 -07:00
  • f92fdd5a2e include windows gpg-agent option to fix #455 drduh 2025-04-19 09:09:57 -07:00
  • 8c4d80d4af
         Merge pull request #485 from drduh/wip-13apr25 drduh 2025-04-15 03:01:42 +00:00
  • f22d1c7e78 update and prefer explicit expiration dates drduh 2025-04-13 16:42:40 -07:00
  • 4f1dc6239f collapse additional uids details drduh 2025-04-13 16:37:26 -07:00
  • 5bce454a4c
         Merge pull request #484 from drduh/wip-12apr25 drduh 2025-04-13 23:00:14 +00:00
  • f008766778 move revocation cert to footnotes drduh 2025-04-12 10:50:18 -07:00
  • 2cc0c10777 update gpg conf refs drduh 2025-04-12 10:31:37 -07:00
  • 5fb7799f21 include gpg configs drduh 2025-04-12 10:27:19 -07:00
  • d7428c1290 organize nixos files drduh 2025-04-12 10:22:46 -07:00
  • 82d6f2aca1 organize scripts drduh 2025-04-12 10:17:18 -07:00
  • 68201047a8 update template refs drduh 2025-04-12 10:11:58 -07:00
  • 2284a40092 organize passphrase templates drduh 2025-04-12 10:08:07 -07:00
  • 2d20dace7c explicit pubkeys instruction drduh 2025-04-12 10:07:10 -07:00
  • 370b170aee
         Merge pull request #478 from Kyshman/kysh-changes drduh 2025-04-12 17:02:04 +00:00
  • ab5d3b7fc8
         Merge pull request #483 from drduh/wip-10apr25 drduh 2025-04-12 17:00:08 +00:00
  • 16550af94c
         Remove reference to EOL tool - Yubikey-Managet-QT Kysh 2025-04-12 14:35:05 +03:00
  • acdcb192bb
         Merge branch 'drduh:master' into kysh-changes Kysh 2025-04-12 13:46:34 +03:00
  • d659595a97 copy of debian live image signing key drduh 2025-04-10 18:25:02 -07:00
  • b81df9c93c simplify debian image urls drduh 2025-04-10 18:13:22 -07:00
  • c341c08c95
         Merge pull request #482 from drduh/wip-07apr25 drduh 2025-04-09 00:53:00 +00:00
  • 0d3da84bc0 patch remaining tips drduh 2025-04-07 17:47:16 -07:00
  • a6aa556c28 format more markdown alerts drduh 2025-04-07 17:42:04 -07:00
  • 9c8f8697fa
         Merge pull request #481 from drduh/wip-06apr25 drduh 2025-04-07 00:01:06 +00:00