pinentry-touchid
wsl2-ssh-pageant
| pinentry-touchid | wsl2-ssh-pageant | |
|---|---|---|
| 2 | 8 | |
| 480 | 309 | |
| - | - | |
| 0.0 | 1.7 | |
| 7 months ago | almost 2 years ago | |
| Go | Go | |
| Apache License 2.0 | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
pinentry-touchid
-
Using resident SSH keys on yubikey on macOS with ssh-agent+keychain support
Yup, I think I mentioned it in the article but here’s the link for anyone interested https://github.com/jorgelbg/pinentry-touchid
- Pinentry-touchid: GPG pinentry program for macOS that allows using Touch ID
wsl2-ssh-pageant
-
Using Unix sockets with WSL2 on Windows Store -> How to Use Unix Sockets with WSL2 on Windows Store
Hey there! So, I've been using WSL2 with a yubikey for gpg, which is pretty sweet. Basically, this setup uses a Unix socket to Windows gpg-agent and pageant (if you're curious, you can find all the details in this GitHub repo: https://github.com/BlackReloaded/wsl2-ssh-pageant). It's been working great for about a month or so, until I recently installed the Windows Store version for WSLg support on Windows 10. But now, my WSL2 isn't talking to the Win gpg-agent anymore. I've searched GitHub for answers, but no luck yet. Figured I'd post here and see if there are others in the same boat or who might have some tips on this pesky socket issue. Thanks!
- Unix sockets + WSL2 win store
-
If you want to use Yubikey from WSL2 (socat passthrough), install gpg4win 3.1.16, NOT the latest (4.0) one
You should use the latest wsl2-ssh-peagent, which has a new --gpgConfigBasepath option to allow you to specify the .gnupg directory in Windows.
-
Tell HN: GitHub no longer supporting unauthenticated `git://`
sshCommand = C:/utils/OpenSSH-Win64/ssh.exe
For GPG, the only things I've done is to use gpg-agent and set up a passthrough for gpg-agent to WSL2 for both OpenSSH and GPG via https://github.com/BlackReloaded/wsl2-ssh-pageant/ since I do development both natively on Windows and via WSL2.
-
SSH Agent Restriction (new in OpenSSH 8.9)
Yeah, I've been using a Yubikey for a bit over a year and I'm already a huge fan of the way it works with SSH/Git. It's a bit more of a pain to set up with WSL2 since you need something like https://github.com/BlackReloaded/wsl2-ssh-pageant but it's absolutely worth the setup time.
-
How to use Windows ssh-agent on a WSL2 distribution to avoid entering SSH key passphrases?
I use PuTTY's pageant and https://github.com/BlackReloaded/wsl2-ssh-pageant to share keys between environments but you still need to enter your passphrase at power-on. Window's ssh-agent looks like a better solution. No need to re-enter the passphrase and no need to keep the private key around.
- YubiKey 5 - Certificates and signing
What are some alternatives?
gopass - The slightly more awesome standard unix password manager for teams
wsl-ssh-pageant - A Pageant -> TCP bridge for use with WSL, allowing for Pageant to be used as an ssh-ageant within the WSL environment.
aws-vault - A vault for securely storing and accessing AWS credentials in development environments
sshuttle - Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.
win-gpg-agent - [DEPRECATED] Windows helpers for GnuPG tools suite
WinCryptSSHAgent - Using a Yubikey for SSH Authentication on Windows Seamlessly
chezmoi - Manage your dotfiles across multiple diverse machines, securely.
windows-fido-bridge - An OpenSSH SK middleware that allows you to use a FIDO/U2F security key (e.g. a YubiKey) to SSH into a remote server from WSL or Cygwin.
keygaen - Sign, verify, encrypt and decrypt data with PGP in your browser.
npiperelay - npiperelay allows you to access Windows named pipes from WSL
pinentry-mac-keychain - A pinentry program for macOs that stores entered PINs in the macOS KeyChain. Convenient when use with smart cards, like Yubikey
YubiKey-Guide - Guide to using YubiKey for GnuPG and SSH