# HG changeset patch # User Steve Losh # Date 1534801849 0 # Node ID fc608d24beb71fcaf44b37d8da0762e201127c7d # Parent 12183e8310cea686b3d10bb1f7f775f2351a2171 Update diff -r 12183e8310ce -r fc608d24beb7 README.markdown --- a/README.markdown Tue Aug 14 16:21:07 2018 +0000 +++ b/README.markdown Mon Aug 20 21:50:49 2018 +0000 @@ -287,3 +287,25 @@ dongle. I checked in all the USB ports on the monitors but didn't see it, til a coworker pointed out the Apple keyboards also have a spare USB port and that's where it was. + +## 2018-08-20 + +Back in Rochester, and GPG is being an asshole once again. Much the same +problem as on 8/12 — I'm trying to switch back to my normal Yubikey. The +problem: + +* I have two Yubikeys, A and B, which hold my GPG key K. +* I normally use A. +* I want to switch to using B. +* GPG still thinks the private keys for K are stored only on A, even when I plug + in B. + +The solution is: + +1. Blow away the "keygrip" files in `~/.gnupg/private-keys-v1.d` corresponding + to the keys on the Yubikeys, but **not** other keygrip files. An easy way to + do this is something like `grep -rl shadowed-private-key ~/.gnupg/private-keys-v1.d/ | xargs rm`. +2. Run `gpg --card-status` so GPG will notice the missing keygrips and realize + they're on this *new* Yubikey. + +I should probably wrap this up into a script.