diff options
| author | Daniel Kahn Gillmor <dkg@fifthhorseman.net> | 2008-08-13 23:01:03 -0400 |
|---|---|---|
| committer | Daniel Kahn Gillmor <dkg@fifthhorseman.net> | 2008-08-13 23:01:03 -0400 |
| commit | 56d6185075f3416b60d5cd3dcebd8cae28ec4295 (patch) | |
| tree | a2d427efc3bda7a6bbcf0b863d83b6e724ae1000 | |
| parent | f11ad8ca1d864d40bdf9ede74bc00d586b0a339c (diff) | |
added note about GnuTLS patch for "gnu-dummy" S2K extension
| -rw-r--r-- | website/bugs/handle-passphrase-locked-secret-keys.mdwn | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/website/bugs/handle-passphrase-locked-secret-keys.mdwn b/website/bugs/handle-passphrase-locked-secret-keys.mdwn index a61b5ba..b66e4c7 100644 --- a/website/bugs/handle-passphrase-locked-secret-keys.mdwn +++ b/website/bugs/handle-passphrase-locked-secret-keys.mdwn @@ -41,6 +41,13 @@ work for reasonable values of `$KEYID`: (cd "$TMPDIR" && ssh-add -c "$kname") rm -rf "$TMPDIR" +Good news! [I've crafted a patch for GnuTLS to enable it to read +exported subkeys using this GNU +extension](http://lists.gnu.org/archive/html/gnutls-devel/2008-08/msg00005.html), +so if we can get it incorporated into upstream (and/or into debian), +we have a possible solution, as long as the authentication key is a +subkey, and not a primary key. + --------- Ben Laurie and Rachel Willmer's |