authenticating-ssh-with-gpg.md

Authenticating SSH with GPG

While technically it's certainly possible to authenticate SSH sessions using GPG, gpg-agent does not always have a friendly co-existence with ssh-agent.

Using PIV for authenticating SSH remains the recommended solution.

Enable enable-ssh-support and write-env-file under ~/.gnupg/gpg-agent.conf:

default-cache-ttl 600
  max-cache-ttl 7200
  pinentry-program /usr/local/MacGPG2/libexec/pinentry-mac.app/Contents/MacOS/pinentry-mac
  enable-ssh-support
  write-env-file