Arch Linux

tedx

Member

Registered: 2016-10-12

Posts: 2

SSH detecting my PGP auth key but not authenticating

I am using a PGP Smartcard, which contains an SSH authentication key. In my gpg-agent.conf, I have the following config:

pinentry-program /usr/bin/pinentry-gnome3
default-cache-ttl 18000
enable-ssh-support

The problem I am having is that when I do an ssh-add -l it detects my key correctly, but if I try to ssh to one of my servers or clone any private git repository, it gives me the following error;

$ ssh <myserver>
sign_and_send_pubkey: signing failed: agent refused operation
Permission denied (publickey).
$ ssh-add -L
4096 SHA256:<xxxxxx> cardno:<xxxx> (RSA)

I did the same thing on a different computer (OSX), and it works fine.

The same happens sswhen I try to decrypt a .gpg file. It gives me the following:

gpg: keyserver option 'ca-cert-file' is obsolete; please use 'hkp-cacert' in dirmngr.conf
gpg: encrypted with 4096-bit RSA key, ID <XXXX>, created 2016-01-13
      "<XXX> <XemailX>"
gpg: public key decryption failed: Operation cancelled
gpg: decryption failed: No secret key

If I try to decrypt the same file on OSX with the same smartcard, it works perfectly.

Note: I am using prezto framework for zsh, with gnupg module enabled (using the same config on OSX).

tedx

Member

Registered: 2016-10-12

Posts: 2

Re: SSH detecting my PGP auth key but not authenticating

Anyone knows a fix for this? I can't SSH nor use GPG