public
/
docs
5
0
Fork 0
Code Issues 8 Pull Requests 2 Packages Projects Releases Wiki Activity

remove stale issues and update keyfork encrypted file name

This commit is contained in:
Anton Livaja 2025-02-13 23:05:43 -05:00
parent 77891a686c
commit 169162303c
Signed by: anton
GPG Key ID: 44A86CFF1FDF0E85
2 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
quorum-vault-system/src/component-documents/openpgp-setup.md
View File

@ -23,7 +23,7 @@ as such need to be set up in a manner that minimizes exposure risks.
``` ```
b. Test the variable was set correctly b. Test the variable was set correctly
``` ```
$ echo $card_id` $ echo $card_id
``` ```
1. Set the smart card to require touch for all operations 1. Set the smart card to require touch for all operations
@ -45,7 +45,7 @@ as such need to be set up in a manner that minimizes exposure risks.
1. Generate a mnemonic, encrypting to a newly-generated key: 1. Generate a mnemonic, encrypting to a newly-generated key:
``` ```
$ keyfork mnemonic generate --encrypt-to-self public.asc,output=private.asc --provision openpgp-card,identifier="$card_id" $ keyfork mnemonic generate --encrypt-to-self public.asc,output=encrypted.asc --provision openpgp-card,identifier="$card_id"
``` ```
Note: The PIN can't use sequential numbers, characters or repeated patterns. Note: The PIN can't use sequential numbers, characters or repeated patterns.
@ -55,7 +55,7 @@ as such need to be set up in a manner that minimizes exposure risks.
``` ```
$ fingerprint="$(sq keyring cert.asc | awk '{ print $2 }')" $ fingerprint="$(sq keyring cert.asc | awk '{ print $2 }')"
$ mv public.asc "${fingerprint}.pub.asc" $ mv public.asc "${fingerprint}.pub.asc"
$ mv private.asc "${fingerprint}.prv.asc" $ mv encrypted.asc "${fingerprint}.encrypted.asc"
``` ```
1. Optional: Create duplicate smartcards. 1. Optional: Create duplicate smartcards.
@ -64,7 +64,7 @@ as such need to be set up in a manner that minimizes exposure risks.
``` ```
$ gpg --import *.pub.asc $ gpg --import *.pub.asc
$ gpg --decrypt *.prv.asc | KEYFORK_PROMPT_TYPE=headless keyfork recover mnemonic --daemon $ gpg --decrypt $fingerprint.encrypted.asc | KEYFORK_PROMPT_TYPE=headless keyfork recover mnemonic --daemon
$ keyfork provision openpgp-card --identifier "$(oct list -i | head -1)" --account-id 0 $ keyfork provision openpgp-card --identifier "$(oct list -i | head -1)" --account-id 0
``` ```

2
quorum-vault-system/src/generated-documents/all-levels/pgp-key-provisioning.md
View File

@ -24,7 +24,7 @@
**Note: Most steps will simplified to a single command in a future iteration** **Note: Most steps will simplified to a single command in a future iteration**
**See: [keyfork#73](https://git.distrust.co/public/keyfork/issues/73), [keyfork#74](https://git.distrust.co/public/keyfork/issues/74), [keyfork#76](https://git.distrust.co/public/keyfork/issues/76), [keyfork#77](https://git.distrust.co/public/keyfork/issues/77), [keyfork#78](https://git.distrust.co/public/keyfork/issues/78)** **See: [keyfork#73](https://git.distrust.co/public/keyfork/issues/73), [keyfork#74](https://git.distrust.co/public/keyfork/issues/74), [keyfork#77](https://git.distrust.co/public/keyfork/issues/77)**
1. If using pre-sealed Cold Bundle unseal as follows: 1. If using pre-sealed Cold Bundle unseal as follows: