Yubico Forum
https://forum.yubico.com/

GnuPG timeout
https://forum.yubico.com/viewtopic.php?f=26&t=2102		 Page 1 of 1
Author:  bramivs [ Mon Nov 23, 2015 5:22 pm ]
Post subject:  GnuPG timeout
Hello,
I am trying the new yubikey 4 with GnuPG. Once I insert the yubikey and enter the pin it doesn't ask the pin again for a decrypt operation. Is it possible to time out the pin code or request the user to re-insert the yubikey to confirm the operation?

In
Code:
man ykpersonalize
it looks like such an option is available:
Code:
              -m mode
                     set device configuration for the YubiKey.  It is parsed in the form mode:cr_timeout:autoeject_timeout
                     where mode is:
                     0    OTP device only.
                     1    CCID device only.
                     2    OTP/CCID composite device.
                     3    U2F device only.
                     4    OTP/U2F composite device.
                     5    U2F/CCID composite device.
                     6    OTP/U2F/CCID composite device.
                     Add 80 to set MODE_FLAG_EJECT, for example: 81
                     cr_timeout is the timeout in seconds for the YubiKey to wait on button press for challenge response (default is 15)
                     autoeject_timeout is the timeout in seconds before the card is automatically ejected in mode 81


I tried setting it to -m82:15:15 but after 15 seconds the card is still available.

Any ideas?

Thanks
Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/