As you probably know by now: We have our SSH and PGP-keys on a CryptoStick. But getting it to work used to be somewhat harder than it is now. So without further ado: The (almost) foolproof way to get SSH and PGP working with the CryptoStick in Ubuntu:
sudo apt-get install gpgsm libccid gnupg-agent
- Go to System > Preferences > Startup Applications and disable “SSH Key Agent”, “Secret Storage Service” and “Certificate and Key Storage” (You could possibly only disable the SSH Key Agent, but this is untested)
gpg --card-edit
andgpg/card> fetch
to import your card public keys. Alternatively, setup your CryptoStick at this stageecho "enable-ssh-support" >> .gnupg/gpg-agent.conf
- Log out and back in
- DONE!
You should now see a pinentry program when SSH’ing or signing a message.