search

buptczq / WinCryptSSHAgent

Using a Yubikey for SSH Authentication on Windows Seamlessly
Apache License 2.0
532 stars 66 forks source link

Add ability to remove PIN cache #62

Closed unreality closed 6 months ago

unreality commented 2 years ago

This pull adds a new argument --disable-pin-cache

If enabled, it will clear the PIN cache after every Sign operation so users are prompted to enter the PIN every time when using Smart Cards.

I have only tested with Smart Cards, so needs testing to make sure setting NCRYPT_PIN_PROPERTY on non-smart-card certs is a noop.

Fixes #58

Further work on holding onto the private key context until a timeout is reached is required for #49