Code:--touch-policy=always
From that point on, Linux has required me to touch the YubiKey whenever a cryptographic operation is requested (it alerts You by blinking). But on Windows, the YubiKey happily performs the operation without me touching it.
I have YubiKey 4 with PIV applet version 4.2.7 and one certificate in slot "Digital Signature". I tested the setup with Pageant-CAC and WinScp (works nicely!), albeit this should have no relevance, as the touch policy should be enforced by the applet. OpenPGP applet correctly requires touch when signing.
Is there any way to force the YubiKey to require touch before letting me use the key? Is there a source code for the PIV applet (like there is for the PGP one) ?Statistics: Posted by rkapl — Mon Jan 18, 2016 8:47 pm
]]>