Arch Linux

rosseba

Member

Registered: 2019-09-13

Posts: 17

yubikey and gpg-agent for SSH auth, PIN requested every time

Before today system upgrade, SSH authentication with yubikeys through gpg-agent worked flowlessy: after the first PIN request, it was cached so new SSH sessions does not require PIN again.
Now every SSH session require PIN for yubikey unlock.
.gnupg config files are the same.
Some upgraded packages:

[2020-12-12T16:27:56+0100] [ALPM] upgraded gnupg (2.2.21-1 -> 2.2.24-1)
[2020-12-12T16:27:53+0100] [ALPM] upgraded libgpg-error (1.38-1 -> 1.39-1)
[2020-12-12T16:27:56+0100] [ALPM] upgraded gpgme (1.13.1-7 -> 1.15.0-2)

No clue enabling debug in gpg-agent.
Is behaviour changed between these versions?
Thanks for any tips.
-f

bulletmark

Member

From: Brisbane, Australia

Registered: 2013-10-22

Posts: 681

Re: yubikey and gpg-agent for SSH auth, PIN requested every time

I update every day and see that gnome-keyring-daemon is failing to start properly today, so my SSH key is not cached etc. The problem appears to be today's update libcap-ng 0.8-1 -> 0.8.2-1. Putting back the older version fixes things.

PS: I see it is this bug.

Last edited by bulletmark (2020-12-12 22:19:44)

rosseba

Member

Registered: 2019-09-13

Posts: 17

Re: yubikey and gpg-agent for SSH auth, PIN requested every time

I update every day and see that gnome-keyring-daemon is failing to start properly today, so my SSH key is not cached etc. The problem appears to be today's update libcap-ng 0.8-1 -> 0.8.2-1. Putting back the older version fixes things.

I think it's not enough - I rolled back libcap-ng to v. 0.8-1 but the issue persist.
-f