fc608d24beb7
Update
author | Steve Losh <steve@stevelosh.com> |
---|---|
date | Mon, 20 Aug 2018 21:50:49 +0000 |
parents | 12183e8310ce |
children | f307853ce9cb |
branches/tags | (none) |
files | README.markdown |
Changes
--- a/README.markdown Tue Aug 14 16:21:07 2018 +0000 +++ b/README.markdown Mon Aug 20 21:50:49 2018 +0000 @@ -287,3 +287,25 @@ dongle. I checked in all the USB ports on the monitors but didn't see it, til a coworker pointed out the Apple keyboards also have a spare USB port and that's where it was. + +## 2018-08-20 + +Back in Rochester, and GPG is being an asshole once again. Much the same +problem as on 8/12 — I'm trying to switch back to my normal Yubikey. The +problem: + +* I have two Yubikeys, A and B, which hold my GPG key K. +* I normally use A. +* I want to switch to using B. +* GPG still thinks the private keys for K are stored only on A, even when I plug + in B. + +The solution is: + +1. Blow away the "keygrip" files in `~/.gnupg/private-keys-v1.d` corresponding + to the keys on the Yubikeys, but **not** other keygrip files. An easy way to + do this is something like `grep -rl shadowed-private-key ~/.gnupg/private-keys-v1.d/ | xargs rm`. +2. Run `gpg --card-status` so GPG will notice the missing keygrips and realize + they're on this *new* Yubikey. + +I should probably wrap this up into a script.