Re: Kmail and signing

Aldo Latino <[email protected]> Wed, 03 Mar 2021 21:29:27 +0100

Newsgroups	gmane.comp.kde.users.pim
Message-ID	<4608413.GXAFRqVoOG@zen>

In data martedì 2 marzo 2021 22:57:00 CET, Ingo Klöcker ha scritto:
> [...] I think you should be able
> to configure your YubiKey to ask for the PIN for every signing operation if
> that's what you want.

I changed the behaviour. Now GnuPG asks me the PIN for every signing 
operation.

> > I should see if I can have both the OpenPGP
> > key and the S/MIME certificate in my Yubikey, which is very convenient to
> > use.
> 
> The upcoming GnuPG 2.3 will support the PIV smartcard application
> additionally to the OpenPGP smartcard application. If your YubiKey supports
> the PIV application (my YubiKey 5 does), then you could store your S/MIME
> certificate on your YubiKey additionally to your OpenPGP keys. If I
> remember correctly, then uploading the signing key to the PIV application
> is not possible because the PIV specification requires the signing key to
> be generated on-card. The encryption key/certificate can be uploaded to the
> PIV application.

I managed to upload my S/MIME certificate in the slot 9c of my YubiKey 4, which 
supports the PIV application.

Is there a way to use the S/MIME certificate stored in the YubiKey, instead of 
the certificate imported in Kleopatra? I would like to enter a PIN instead of 
the passphrase for every signing operation.

Thank you, Ingo, for your help. Much appreciated.

-- 
Aldo Latino
[email protected]

signature.asc (application/pgp-signature, 833 B)