Nicolas RoToRx88

## gnupg_scdaemon.md

      
              1 file
            
          
              30 forks
            
          
              32 comments
            
          
              159 stars
            
          
                artizirk
                / gnupg_scdaemon.md
            
            
              Last active
              May 16, 2024 05:21
            
              
                OpenPGP SSH access with Yubikey and GnuPG
              
          
    NB: This document describles a 'Old-School' way of using Yubikey with SSH

Modern OpenSSH has native support for FIDO Authentication. Its much simpler and should also be more stable with less moving parts. OpenSSH also now has support for signing arbitary files witch can be used as replacement of gnupg. Git also supports signing commits/tags with ssh keys.
Pros of FIDO


Simpler stack / less moving parts
Works directly with ssh, ssh-add and ssh-keygen on most computers
Simpler
Private key can never leave the FIDO device

Cons of FIDO


## self-signed-certificate-with-custom-ca.md

      
              1 file
            
          
              424 forks
            
          
              49 comments
            
          
              1354 stars
            
          
                fntlnz
                / self-signed-certificate-with-custom-ca.md
            
            
              Last active
              May 17, 2024 07:59
            
              
                Self Signed Certificate with Custom Root CA
              
          
    Create Root CA (Done once)

Create Root Key

Attention: this is the key used to sign the certificate requests, anyone holding this can sign certificates on your behalf. So keep it in a safe place!
openssl genrsa -des3 -out rootCA.key 4096