Mikaela/gist
1
0
Fork 0
mirror of https://gitea.blesmrt.net/mikaela/gist.git synced 2024-11-22 03:09:22 +01:00
Code Issues Projects Releases Wiki Activity

fineid: correct parts, new information

Browse Source
This commit is contained in:
Aminda Suomalainen 2022-02-10 17:45:58 +02:00
parent 699dd9529f
commit 081b860064
Signed by: Mikaela
SSH Key Fingerprint: SHA256:CXLULpqNBdUKB6E6fLA1b/4SzG0HvKD19PbIePU175Q
1 changed files with 16 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

19
fineid/README.md
View File

@ -16,6 +16,13 @@ PCSDd must be running, it's found in package `pcscd` on Debian and likely
sudo systemctl enable pcscd --now
```
[As in my shell-things repo, /etc/pkcs11/modules/libcryptoki.module should be created;](https://gitea.blesmrt.net/mikaela/shell-things/src/branch/master/etc/pkcs11/modules)
```
module: /usr/lib64/libcryptoki.so
managed: no
```
## Chromium
Should work as long as the `DigiSignApplication` from above was running before
@ -23,6 +30,9 @@ the browser was started.
## Firefox and Thunderbird
***This doesn't apply if the above libcryptoki.so is created
and preferably `libcryptoki.so` would be loaded anyway***
In Settings, Advanced, Security devices load the module from (DVV app) `/usr/lib64/libcryptoki.so` or (OpenSC):
* Debian: `/usr/lib/x86_64-linux-gnu/onepin-opensc-pkcs11.so`
@ -49,8 +59,11 @@ While I don't think the user necessarily needs them, my notes mention `DVV Gov.
1. Add the key to the agent
* Debian: `ssh-add -s /usr/lib/x86_64-linux-gnu/opensc-pkcs11.so`
* Fedora: `ssh-add -s /usr/lib64/opensc-pkcs11.so`
2. Export the public key(s) by `ssh-add -L`
3. Naturally put them into `~/.ssh/authorized_keys`, but SSH should detect
them automatically. The file could also be mentioned in `ssh_config`
2. Export the public key by `ssh-add -L|head -n1` (the comment should be "todentamis- ja salausavain" ("authentication and encryption key"))
3. Naturally put it into `~/.ssh/authorized_keys`, but SSH should detect
it automatically. The file could also be mentioned in `ssh_config`
The public key should also be stored somewhere that can be passed to gitconfig
or SSH signing commands if SSH signing is to be used.
Via: https://www.linux.fi/wiki/HST#Ssh_2