1
0
mirror of https://github.com/drduh/YubiKey-Guide.git synced 2024-12-23 08:58:56 +00:00

Merge pull request #136 from sunknudsen/master

Added important note about pin caching #135
This commit is contained in:
drduh 2019-10-25 23:26:33 +00:00 committed by GitHub
commit 9edda012a3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -1578,6 +1578,8 @@ max-cache-ttl 120
pinentry-program /usr/bin/pinentry-curses
```
**Important** The `cache-ttl` options do **NOT** apply when using a YubiKey as a smartcard as the PIN is [cached by the smartcard itself](https://dev.gnupg.org/T3362). Therefore, in order to clear the PIN from cache (smartcard equivalent to `default-cache-ttl` and `max-cache-ttl`), you need to unplug the YubiKey.
**Tip** Set `pinentry-program /usr/bin/pinentry-gnome3` for a GUI-based prompt.
On macOS, use `brew install pinentry-mac` and adjust the program path to suit.