use with yubikey-agent

[cnf]

I am trying to get yubikey-touch-detector working with FiloSottile/yubikey-agent@2e5376c but I am having no success.

running it manually:

yubikey-touch-detector -libnotify -v -stdout
DEBU[2025-02-14T19:09:45+01:00] Starting YubiKey touch detector              
DEBU[2025-02-14T19:09:45+01:00] HMAC watcher on '/dev' is successfully established 
DEBU[2025-02-14T19:09:45+01:00] U2F watcher on '/dev' is successfully established 
DEBU[2025-02-14T19:09:45+01:00] Directory '/home/cnf/.gnupg/private-keys-v1.d' does not exist or cannot stat it 

and then nothing.

SSH_AUTH_SOCK is set, U2F IS detected, but i can not get it working with yubikey-agent.

I am on NixOS, with version 1.12.5.

Any help would be appreciated.

[maximbaz]

Hello, this app only works with gpg for ssh support, so it detects a touch when gpg-agent is used as ssh agent, but that's about it.

I definitely don't mind having support for yubikey-agent, and I can see it uses PIV to talk to the device. Support for that is requested and tracked in #22, but nobody is actively doing any work on that. PRs are most definitely welcome 😁

Once #22 is done, touches requested by yubikey-agent will maybe begin to be detected as well, or maybe not. If not, it's likely that some changes would need to be done both here and in yubikey-agent, and as the last commit in yubikey-agent is 3 years ago, it might prove to be an additional challenge.

[cnf]

That make sense, thanks. Yeah yubikey-agent isn't active sadly, but it does the thing i need... If I have some space, I might look into what is needed, thanks!

[maximbaz]

#22 has a couple of other interesting projects linking to it, see in particular smlx/piv-agent#223, it looks like a next gen yubikey-agent, which is active and other people are also interested in the same thing as you.

The general feedback is the same - I'd be more than happy to have support for that. Ideally we'd find some way to get the "touch needed" directly from PIV, so that all apps using it will be supported. If hard or impossible, it's also okay to teach e.g. piv-agent and yubikey-touch-detector to talk to each other - in fact that's how we started with U2F, folks at pam-u2f agreed to do this, we got the feature shipped, and later we replaced that with a proper integration with U2F and FIDO2 protocols, which allowed to see touch requests e.g. from browsers.