Opened 9 years ago

Closed 9 years ago

Last modified 9 years ago

#46113 closed enhancement (fixed)

gpg-agent @2.0.26_4: enable SSH agent support with launchd integration

Reported by: macports@… Owned by: Ionic (Mihai Moldovan)
Priority: Normal Milestone:
Component: ports Version:
Keywords: Cc: cooljeanius (Eric Gallager)
Port: gpg-agent

Description

Ticket #43584 introduces launchd support, but explicitly disables the SSH agent support. I'd like to petition to have this re-enabled.

The use case for me is down to using an OpenPGP smart card for storing my GPG and SSH keys on. Only the gpg-agent with its SSH support is able to access the SSH key stored within. I'm perfectly happy to have to disable Apple's SSH agent to be able to do this, or even enable a special variant on the port to be able to do so, but this is a really important feature for me.

In addition, un-commenting the options in the LaunchAgent to enable this allows launchd to create the socket, but just causes ssh to hang when trying to access it. That's really unfriendly.

Thanks, Chris

Change History (8)

comment:1 Changed 9 years ago by larryv (Lawrence Velázquez)

Keywords: ssh agent launchd removed
Owner: changed from macports-tickets@… to ionic@…
Summary: gpg-agent: enable SSH agent support with launchd integrationgpg-agent @2.0.26_4: enable SSH agent support with launchd integration

In future tickets, please Cc any port maintainers to ensure that they’re notified (port info --maintainers gpg-agent).

comment:2 Changed 9 years ago by larryv (Lawrence Velázquez)

Type: defectenhancement
Version: 2.3.3

comment:3 Changed 9 years ago by Ionic (Mihai Moldovan)

Status: newassigned

Wow, there's an actual use case.

Alright. SSH agent support has been disabled for good reasons (mostly because it is completely untested and I haven't even made sure that it even most basically works.)

This is due to the fact, that openssh's ssh agent -- may it be utilized via the openssh version shipped by Apple or installed via MacPorts -- is the far superior solution on OS X for most people due to its keychain integration. However, you seem to be positive that you need it, so I'll take a look. I need to refactor the patch anyway.

The SSH agent related stuff in the LaunchAgent plist was merely meant as a testing ground for myself, not for users to actually enable.

Last edited 9 years ago by Ionic (Mihai Moldovan) (previous) (diff)

comment:4 Changed 9 years ago by macports@…

:-)

More than happy to test any updated patches / Portfiles you want to throw my way.

comment:5 Changed 9 years ago by cooljeanius (Eric Gallager)

Cc: egall@… added

Cc Me!

comment:6 Changed 9 years ago by Ionic (Mihai Moldovan)

Disclaimer: this may take some time... I'm currently very hold up.

comment:7 Changed 9 years ago by Ionic (Mihai Moldovan)

Resolution: fixed
Status: assignedclosed

I've been updating both gnupg2 and gpg-agent to the most recent version in r138083.

After that, I revisited this issue and tried fixing SSH agent support in r138086.

Note that you will need to enable the new ssh_agent variant to enable it... and make sure that no other SSH agent is running.

I have only tested very superficially by running ssh-add -l, which worked okay.

Last edited 9 years ago by Ionic (Mihai Moldovan) (previous) (diff)

comment:8 Changed 9 years ago by macports@…

Thank you! Yes, that seems to be working for me. Much appreciated!

Note: See TracTickets for help on using tickets.