Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

YubiKey Cached Touch Policy doesn't work with Git Submodules (Bitbucket) #655

Open
FreeJ1nG opened this issue Jan 17, 2025 · 0 comments
Open

Comments

@FreeJ1nG
Copy link

Hey, so i've tried setting the touch policy of my Yubikey to CACHED

➜ ykman openpgp info
OpenPGP version:            3.4
Application version:        5.4.3
PIN tries remaining:        3
Reset code tries remaining: 0
Admin PIN tries remaining:  3
Require PIN for signature:  Once
KDF enabled:                False
Touch policies:            
  Signature key:      Cached
  Encryption key:     Cached
  Authentication key: Cached
  Attestation key:    Off

I configured my bitbucket account to have the public key associated with the keys stored inside my yubikey

Whenever i try to run git commands that is associated with submodules (It's a repository with over 15 submodules), multiple yubikey touches are prompted even though I've set the touch policy to cached

Note that setting the touch policy to ON would make git prompt a touch on every submodule operation, while CACHED only prompts for 2-3 touches (the amount of touches seem to be random)

Would there be any solution to this problem? If not, why is git prompting multiple yubikey touches? I've read that Yubikey cached touch policy caches the credentials for 15s, so I don't get why this is happening

I know that this might not be an issue on yubikey-manager's part, but I thought that this might be a good place to ask anyway

Thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

1 participant