Skip to content

YubiKey Cached Touch Policy doesn't work with Git Submodules (Bitbucket) #655

Open
@FreeJ1nG

Description

@FreeJ1nG

Hey, so i've tried setting the touch policy of my Yubikey to CACHED

➜ ykman openpgp info
OpenPGP version:            3.4
Application version:        5.4.3
PIN tries remaining:        3
Reset code tries remaining: 0
Admin PIN tries remaining:  3
Require PIN for signature:  Once
KDF enabled:                False
Touch policies:            
  Signature key:      Cached
  Encryption key:     Cached
  Authentication key: Cached
  Attestation key:    Off

I configured my bitbucket account to have the public key associated with the keys stored inside my yubikey

Whenever i try to run git commands that is associated with submodules (It's a repository with over 15 submodules), multiple yubikey touches are prompted even though I've set the touch policy to cached

Note that setting the touch policy to ON would make git prompt a touch on every submodule operation, while CACHED only prompts for 2-3 touches (the amount of touches seem to be random)

Would there be any solution to this problem? If not, why is git prompting multiple yubikey touches? I've read that Yubikey cached touch policy caches the credentials for 15s, so I don't get why this is happening

I know that this might not be an issue on yubikey-manager's part, but I thought that this might be a good place to ask anyway

Thanks!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions