rbvermaa

Setting up ssh public key authentication on macOS using a YubiKey 4

I largely followed Florin's blog post, but have a few notes to add regarding issues I encountered:

Basic setup notes

1. I used a YubiKey 4, while the blog describes using a YubiKey NEO. I'm sure a YubiKey 5 would also work. I'm also running macOS 10.13.6.
2. I installed GPGTools as recommended. However, as I'll note later, it seems that gpg-agent only automatically starts when gpg is used; for ssh, you'll need to ensure it's running.
3. Before generating your keys, decide what key size you want to use. If you run the list command inside gpg --edit-card, look for the Key attributes line to see what is currently selected. On my YubiKey 4, it defaulted to 2048 bits for all keys:

Key attributes ...: rsa2048 rsa2048 rsa2048

rbvermaa

let
  pkgs = import <nixpkgs> {};
  buildJulia = version: sha256:
    with pkgs;
    gcc7Stdenv.mkDerivation {
      makeFlags = [
        "ARCH=x86_64"
        "MARCH=x86-64"
        "JULIA_CPU_TARGET=x86-64"
        "USE_BINARYBUILDER=0"

rbvermaa

┌─ run-delve
│ ┌─ compile
│ │ ┌─ compile-init
│ │ └─ compile-init duration: 0.30308
│ │ ┌─ frontend
│ │ │ ┌─ parse
│ │ │ └─ parse duration: 0.01817
│ │ │ ┌─ compile
│ │ │ │ ┌─ delve-specialize
│ │ │ │ └─ delve-specialize duration: 0.05877

rbvermaa

Keybase proof

I hereby claim:

• I am rbvermaa on github.
• I am rbvermaa (https://keybase.io/rbvermaa) on keybase.
• I have a public key ASBxbAkN2uvnXt2g7c6hv_5w0yBqbWqQkxknAKzDWcwnbwo

To claim this, I am signing this object:

rbvermaa

script: ./maintainers/scripts/travis/basic-checks.sh