Yubikey smartcard & challenge mode usable on remote ssh

Help
11

@colemickens

I use the Yubikey as OpenPGP smartcard mode.

  • SSH connection using gpg-agent and key created and stored into yubikey (as smartcard) works
  • typing ssh-add -l on remote after connection works and return 4096 SHA256:xxx cardno:xxx (RSA)

BUT anything linked to detection of smartcard, like gpg --smart-status, gpg --card-edit don’t work, this is strange, no ?

drduh/YubiKey-Guide say, on the FWD agent part :

You should now be able use ssh -A remote on the local machine to log into remote , and should then be able to use YubiKey as if it were connected to the remote machine.

Perhaps the Yubikey challenge-response (configured on slot 2) cannot be FWD, but reading the drduh guide, it seems possible to access some smartcard functionalities during/on remote.

Edit : i try the tutorial mlohr (old way to do that, if i read correctly the drduh tutorial), using directly RemoteForward on command line -A -R, also without success :

ssh -A xxx -R /run/user/0/gnupg/S.gpg-agent:/run/user/1000/gnupg/S.gpg-agent

Thanks for your help