Dis/enroll with YubiKey

agherzan / yubikey-full-disk-encryption

Use YubiKey to unlock a LUKS partition

Apache License 2.0

795 stars 50 forks source link

Dis/enroll with YubiKey #37

Closed sandrokeil closed 5 years ago

sandrokeil commented 5 years ago

This PR adds:

Support to enroll a new YubiKey with existing YubiKey
Support to disenroll existing key slot with YubiKey

I need this to add a second YubiKey to my existing YubiKey encrypted device or to replace a YubiKey.

Vincent43 commented 5 years ago

Thanks for the idea. What do you think about adding disenroll as option to ykfde-enroll script, let's say -k, YKFDE_SLOT_KILL=1 instead of the new script?

sandrokeil commented 5 years ago

No problem, I will update my PR next week.

sandrokeil commented 5 years ago

@Vincent43 I removed the script ykfde-disenroll and added some if statements to ensure all paths.

Vincent43 commented 5 years ago

@sandrokeil I'm sorry for being such nit but that's what I'm paid for :laughing:. Anyway we're getting really close to merging this. Thank you.

sandrokeil commented 5 years ago

@Vincent43 No worries. ;-) I guess it's done.

Vincent43 commented 5 years ago

Thanks for those patches. I squashed them as they looked weird separately.