arekinath / pivy

Tools for using PIV tokens (like Yubikeys) as an SSH agent, for encrypting data at rest, and more
193 stars 26 forks source link

error messages on last pin use could be more explicit #41

Open rmustacc opened 1 year ago

rmustacc commented 1 year ago

While attempting to work through and reset things I got into a situation where it was not using up the last pin attempt trying to protect me from myself, which is quite kind. The error message is of the form:

$ pivy-tool sign 9a
asdf
Enter PIV PIN for token 5D7E5122: 
pivy-tool: insufficient PIN retries remaining (1 left)

When this was happening I didn't realize that the pin I was entering was being ignored and the operation was aborted. I realize I should have probably put that together with the insufficient PIN retries remaining. It may help to mention the use of -f or to be a little more explicit that we're not attempting to do anything with this.