{"id":449,"date":"2024-05-10T19:35:39","date_gmt":"2024-05-10T11:35:39","guid":{"rendered":"https:\/\/jdzhao.com\/?p=449"},"modified":"2024-05-14T18:53:47","modified_gmt":"2024-05-14T10:53:47","slug":"yubikey-gpg-agent-ssh-remote","status":"publish","type":"post","link":"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/","title":{"rendered":"Using GPG Keys for SSH Authentication to Access a Server"},"content":{"rendered":"

Remember in the previous article \u300aYUBIKEY\u7684GPG\/PGP\u4f7f\u7528\u4e0d\u5b8c\u5168\u5b9e<\/a>\u300b \"Incomplete Practice of Using YUBIKEY's GPG\/PGP,\" we also generated a subkey for AUTH.<\/p>\n\n\n\n

One use of this subkey is to authenticate via SSH using the GPG-AGENT on the server, without having to generate a separate set of SSH keys, which helps in unified management.<\/p>\n\n\n\n

Today, we'll practice this on a Mac system. First, insert your YUBIKEY (if you don't have one, GPG software alone will suffice).<\/p>\n\n\n\n

Enter gpg --list-keys --keyid-format LONG to find the ID of the subkey used for AUTH.<\/p>\n\n\n\n

It should look something like this:\nsub rsa4096\/0*******************5E 2024-05-07 [A] [expires: 2029-05-06]<\/p>\n\n\n\n

Open ~\/.gnupg\/gpg-agent.conf with any text editor and add enable-ssh-support to enable SSH support in gpg-agent.gpg-agent<\/code>\u4e2d\u542f\u7528SSH\u652f\u6301\u3002<\/p>\n\n\n\n

Add the subkey ID~\/.gnupg\/sshcontrol<\/code> Add the ID 0*******************5E to ~\/.gnupg\/sshcontrol. <\/p>\n\n\n\n

Tell the terminal to use the gpg-agent socket instead of the ssh-agent:

export GPG_TTY=$(tty)
export SSH_AUTH_SOCK=$(gpgconf –list-dirs agent-ssh-socket)
gpgconf –launch gpg-agent<\/p>\n\n\n\n

Verify the setup by executing ssh-add -l. You should see the subkey added. If not, try restarting the terminal.<\/p>\n\n\n\n

4096 SHA256:U****ifS\/j********H5k cardno:20 567 787 (RSA) \u3010\u8fd9\u8bf4\u660e\u662fyubikey\u3011<\/p>\n\n\n\n

4096 SHA256:Uq***QWifS\/j********H5k (none) (RSA)\u3010\u8fd9\u8bf4\u660e\u662f\u672c\u5730\u7684key\u3011<\/p>\n\n\n\n

Export the public key. Remember, this is not your GPG public key:<\/p>\n\n\n\n

gpg –export-ssh-key i@jdzhao.com<\/p>\n\n\n\n

Add the exported public key to the ~\/.ssh\/authorized_keys file on the remote server.<\/p>\n\n\n\n

You're all set! If you encounter any issues, use ssh -vvv root@1.1.1.1 -p 22 to troubleshoot.<\/p>\n\n\n\n

\"yubikey-gpg-agent-ssh-remote\"<\/figure>\n\n\n\n

Summary: Using GPG allows for unified key management, avoiding the need for an additional set of SSH keys. The reason for not choosing the more convenient FIDO2 is that FIDO2 keys are bound to the hardware key itself. If the key is lost, there's no way to recover it, leading to potential significant issues.<\/p>\n\n\n\n


<\/p>","protected":false},"excerpt":{"rendered":"

\u8fd8\u8bb0\u5f97\u5728\u4e0a\u4e00\u7bc7\u6587\u7ae0\u300aYUBIKEY\u7684GPG\/PGP\u4f7f\u7528\u4e0d\u5b8c\u5168\u5b9e\u8df5\u300b\u4e2d\uff0c\u6211\u4eec\u8fd8\u751f\u6210\u4e86\u4e00\u4e2a\u7528\u4e8eAUTH\u7684\u5b50\u5bc6\u94a5\u4e48\u3002 […]<\/p>","protected":false},"author":1,"featured_media":450,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[5],"tags":[20],"class_list":["post-449","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-5","tag-20"],"yoast_head":"\n\u4f7f\u7528GPG\u5bc6\u94a5\u901a\u8fc7SSH\u8eab\u4efd\u9a8c\u8bc1\u8bbf\u95ee\u670d\u52a1\u5668 - \u91cd\u5149\u9601-Jundong's Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"\u4f7f\u7528GPG\u5bc6\u94a5\u901a\u8fc7SSH\u8eab\u4efd\u9a8c\u8bc1\u8bbf\u95ee\u670d\u52a1\u5668 - \u91cd\u5149\u9601-Jundong's Blog\" \/>\n<meta property=\"og:description\" content=\"\u8fd8\u8bb0\u5f97\u5728\u4e0a\u4e00\u7bc7\u6587\u7ae0\u300aYUBIKEY\u7684GPG\/PGP\u4f7f\u7528\u4e0d\u5b8c\u5168\u5b9e\u8df5\u300b\u4e2d\uff0c\u6211\u4eec\u8fd8\u751f\u6210\u4e86\u4e00\u4e2a\u7528\u4e8eAUTH\u7684\u5b50\u5bc6\u94a5\u4e48\u3002 […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/\" \/>\n<meta property=\"og:site_name\" content=\"\u91cd\u5149\u9601-Jundong's Blog\" \/>\n<meta property=\"article:published_time\" content=\"2024-05-10T11:35:39+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-05-14T10:53:47+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jdzhao.com\/wp-content\/uploads\/2024\/05\/\u622a\u5c4f2024-05-10-19.29.59.png?v=1715340693\" \/>\n\t<meta property=\"og:image:width\" content=\"959\" \/>\n\t<meta property=\"og:image:height\" content=\"591\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"MR.Zhao\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"MR.Zhao\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/\"},\"author\":{\"name\":\"MR.Zhao\",\"@id\":\"https:\/\/jdzhao.com\/#\/schema\/person\/532d6b7e3c1da655148aba19b550ae62\"},\"headline\":\"\u4f7f\u7528GPG\u5bc6\u94a5\u901a\u8fc7SSH\u8eab\u4efd\u9a8c\u8bc1\u8bbf\u95ee\u670d\u52a1\u5668\",\"datePublished\":\"2024-05-10T11:35:39+00:00\",\"dateModified\":\"2024-05-14T10:53:47+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/\"},\"wordCount\":91,\"commentCount\":2,\"publisher\":{\"@id\":\"https:\/\/jdzhao.com\/#\/schema\/person\/532d6b7e3c1da655148aba19b550ae62\"},\"image\":{\"@id\":\"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jdzhao.com\/wp-content\/uploads\/2024\/05\/\u622a\u5c4f2024-05-10-19.29.59.png?v=1715340693\",\"keywords\":[\"\u52a0\u5bc6\"],\"articleSection\":[\"\u4e92\u8054\u7f51\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/\",\"url\":\"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/\",\"name\":\"\u4f7f\u7528GPG\u5bc6\u94a5\u901a\u8fc7SSH\u8eab\u4efd\u9a8c\u8bc1\u8bbf\u95ee\u670d\u52a1\u5668 - \u91cd\u5149\u9601-Jundong's Blog\",\"isPartOf\":{\"@id\":\"https:\/\/jdzhao.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jdzhao.com\/wp-content\/uploads\/2024\/05\/\u622a\u5c4f2024-05-10-19.29.59.png?v=1715340693\",\"datePublished\":\"2024-05-10T11:35:39+00:00\",\"dateModified\":\"2024-05-14T10:53:47+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/#primaryimage\",\"url\":\"https:\/\/jdzhao.com\/wp-content\/uploads\/2024\/05\/\u622a\u5c4f2024-05-10-19.29.59.png?v=1715340693\",\"contentUrl\":\"https:\/\/jdzhao.com\/wp-content\/uploads\/2024\/05\/\u622a\u5c4f2024-05-10-19.29.59.png?v=1715340693\",\"width\":959,\"height\":591},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\/\/jdzhao.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"\u4f7f\u7528GPG\u5bc6\u94a5\u901a\u8fc7SSH\u8eab\u4efd\u9a8c\u8bc1\u8bbf\u95ee\u670d\u52a1\u5668\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jdzhao.com\/#website\",\"url\":\"https:\/\/jdzhao.com\/\",\"name\":\"\u91cd\u5149\u9601-Jundong's Blog\",\"description\":\"\u4e00\u4e2a\u5206\u4eab\u751f\u6d3b\u7684\u81ea\u7559\u5730\",\"publisher\":{\"@id\":\"https:\/\/jdzhao.com\/#\/schema\/person\/532d6b7e3c1da655148aba19b550ae62\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jdzhao.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/jdzhao.com\/#\/schema\/person\/532d6b7e3c1da655148aba19b550ae62\",\"name\":\"MR.Zhao\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jdzhao.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/jdzhao.com\/wp-content\/uploads\/2024\/01\/cropped-4de75d49-562b-4335-a7d0-57a27272e5a3.webp\",\"contentUrl\":\"https:\/\/jdzhao.com\/wp-content\/uploads\/2024\/01\/cropped-4de75d49-562b-4335-a7d0-57a27272e5a3.webp\",\"width\":536,\"height\":525,\"caption\":\"MR.Zhao\"},\"logo\":{\"@id\":\"https:\/\/jdzhao.com\/#\/schema\/person\/image\/\"},\"sameAs\":[\"https:\/\/jdzhao.com\"],\"url\":\"https:\/\/jdzhao.com\/en\/author\/zhaojundong\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\u4f7f\u7528GPG\u5bc6\u94a5\u901a\u8fc7SSH\u8eab\u4efd\u9a8c\u8bc1\u8bbf\u95ee\u670d\u52a1\u5668 - \u91cd\u5149\u9601-Jundong's Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/","og_locale":"en_US","og_type":"article","og_title":"\u4f7f\u7528GPG\u5bc6\u94a5\u901a\u8fc7SSH\u8eab\u4efd\u9a8c\u8bc1\u8bbf\u95ee\u670d\u52a1\u5668 - \u91cd\u5149\u9601-Jundong's Blog","og_description":"\u8fd8\u8bb0\u5f97\u5728\u4e0a\u4e00\u7bc7\u6587\u7ae0\u300aYUBIKEY\u7684GPG\/PGP\u4f7f\u7528\u4e0d\u5b8c\u5168\u5b9e\u8df5\u300b\u4e2d\uff0c\u6211\u4eec\u8fd8\u751f\u6210\u4e86\u4e00\u4e2a\u7528\u4e8eAUTH\u7684\u5b50\u5bc6\u94a5\u4e48\u3002 […]","og_url":"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/","og_site_name":"\u91cd\u5149\u9601-Jundong's Blog","article_published_time":"2024-05-10T11:35:39+00:00","article_modified_time":"2024-05-14T10:53:47+00:00","og_image":[{"width":959,"height":591,"url":"https:\/\/jdzhao.com\/wp-content\/uploads\/2024\/05\/\u622a\u5c4f2024-05-10-19.29.59.png?v=1715340693","type":"image\/png"}],"author":"MR.Zhao","twitter_card":"summary_large_image","twitter_misc":{"Written by":"MR.Zhao"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/#article","isPartOf":{"@id":"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/"},"author":{"name":"MR.Zhao","@id":"https:\/\/jdzhao.com\/#\/schema\/person\/532d6b7e3c1da655148aba19b550ae62"},"headline":"\u4f7f\u7528GPG\u5bc6\u94a5\u901a\u8fc7SSH\u8eab\u4efd\u9a8c\u8bc1\u8bbf\u95ee\u670d\u52a1\u5668","datePublished":"2024-05-10T11:35:39+00:00","dateModified":"2024-05-14T10:53:47+00:00","mainEntityOfPage":{"@id":"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/"},"wordCount":91,"commentCount":2,"publisher":{"@id":"https:\/\/jdzhao.com\/#\/schema\/person\/532d6b7e3c1da655148aba19b550ae62"},"image":{"@id":"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/#primaryimage"},"thumbnailUrl":"https:\/\/jdzhao.com\/wp-content\/uploads\/2024\/05\/\u622a\u5c4f2024-05-10-19.29.59.png?v=1715340693","keywords":["\u52a0\u5bc6"],"articleSection":["\u4e92\u8054\u7f51"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/","url":"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/","name":"\u4f7f\u7528GPG\u5bc6\u94a5\u901a\u8fc7SSH\u8eab\u4efd\u9a8c\u8bc1\u8bbf\u95ee\u670d\u52a1\u5668 - \u91cd\u5149\u9601-Jundong's Blog","isPartOf":{"@id":"https:\/\/jdzhao.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/#primaryimage"},"image":{"@id":"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/#primaryimage"},"thumbnailUrl":"https:\/\/jdzhao.com\/wp-content\/uploads\/2024\/05\/\u622a\u5c4f2024-05-10-19.29.59.png?v=1715340693","datePublished":"2024-05-10T11:35:39+00:00","dateModified":"2024-05-14T10:53:47+00:00","breadcrumb":{"@id":"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/#primaryimage","url":"https:\/\/jdzhao.com\/wp-content\/uploads\/2024\/05\/\u622a\u5c4f2024-05-10-19.29.59.png?v=1715340693","contentUrl":"https:\/\/jdzhao.com\/wp-content\/uploads\/2024\/05\/\u622a\u5c4f2024-05-10-19.29.59.png?v=1715340693","width":959,"height":591},{"@type":"BreadcrumbList","@id":"https:\/\/jdzhao.com\/en\/yubikey-gpg-agent-ssh-remote\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/jdzhao.com\/"},{"@type":"ListItem","position":2,"name":"\u4f7f\u7528GPG\u5bc6\u94a5\u901a\u8fc7SSH\u8eab\u4efd\u9a8c\u8bc1\u8bbf\u95ee\u670d\u52a1\u5668"}]},{"@type":"WebSite","@id":"https:\/\/jdzhao.com\/#website","url":"https:\/\/jdzhao.com\/","name":"\u91cd\u5149\u9601-Jundong's Blog","description":"\u4e00\u4e2a\u5206\u4eab\u751f\u6d3b\u7684\u81ea\u7559\u5730","publisher":{"@id":"https:\/\/jdzhao.com\/#\/schema\/person\/532d6b7e3c1da655148aba19b550ae62"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jdzhao.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/jdzhao.com\/#\/schema\/person\/532d6b7e3c1da655148aba19b550ae62","name":"MR.Zhao","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jdzhao.com\/#\/schema\/person\/image\/","url":"https:\/\/jdzhao.com\/wp-content\/uploads\/2024\/01\/cropped-4de75d49-562b-4335-a7d0-57a27272e5a3.webp","contentUrl":"https:\/\/jdzhao.com\/wp-content\/uploads\/2024\/01\/cropped-4de75d49-562b-4335-a7d0-57a27272e5a3.webp","width":536,"height":525,"caption":"MR.Zhao"},"logo":{"@id":"https:\/\/jdzhao.com\/#\/schema\/person\/image\/"},"sameAs":["https:\/\/jdzhao.com"],"url":"https:\/\/jdzhao.com\/en\/author\/zhaojundong\/"}]}},"jetpack_featured_media_url":"https:\/\/jdzhao.com\/wp-content\/uploads\/2024\/05\/\u622a\u5c4f2024-05-10-19.29.59.png?v=1715340693","jetpack_sharing_enabled":true,"jetpack-related-posts":[],"_links":{"self":[{"href":"https:\/\/jdzhao.com\/en\/wp-json\/wp\/v2\/posts\/449","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jdzhao.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jdzhao.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jdzhao.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jdzhao.com\/en\/wp-json\/wp\/v2\/comments?post=449"}],"version-history":[{"count":2,"href":"https:\/\/jdzhao.com\/en\/wp-json\/wp\/v2\/posts\/449\/revisions"}],"predecessor-version":[{"id":452,"href":"https:\/\/jdzhao.com\/en\/wp-json\/wp\/v2\/posts\/449\/revisions\/452"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jdzhao.com\/en\/wp-json\/wp\/v2\/media\/450"}],"wp:attachment":[{"href":"https:\/\/jdzhao.com\/en\/wp-json\/wp\/v2\/media?parent=449"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jdzhao.com\/en\/wp-json\/wp\/v2\/categories?post=449"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jdzhao.com\/en\/wp-json\/wp\/v2\/tags?post=449"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}