diff --git a/doc/README-SSH.md b/doc/README-SSH.md index 6b49245..4e39fc4 100644 --- a/doc/README-SSH.md +++ b/doc/README-SSH.md @@ -238,19 +238,23 @@ openssh/openssh-portable@2a9c9f7 ##### generate SSH public key +``` $ trezor-agent -e ed25519 git@github.com | tee ~/.ssh/trezor-github.pub ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIvcbhXyaXXNytCLTDfEMlLuwEhtfo0XmPP1U5RsnOZ4 - +``` ##### sign the given file using TREZOR +``` $ trezor-agent -e ed25519 git@github.com -- ssh-keygen -Y sign -f ~/.ssh/trezor-github.pub -n file README.md Signing file README.md Write signature to README.md.sig - +``` ##### set allowed identities for verification (using the above public key) +``` $ cat allowed git@github.com ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIIvcbhXyaXXNytCLTDfEMlLuwEhtfo0XmPP1U5RsnOZ4 - +``` ##### verify the above signature +``` $ ssh-keygen -Y verify -f allowed -I git@github.com -n file -s README.md.sig -vvv < README.md debug1: sshsig_verify_fd: signature made with hash "sha512" debug1: sshsig_wrap_verify: verify message length 64 @@ -258,8 +262,7 @@ debug1: Valid (unverified) signature from key SHA256:6UBhPb5SOoCUfasGC1/aCBegYov debug1: parse_principals_key_and_options: allowed:1: matched principal "git@github.com" debug1: allowed:1: matched key and principal Good "file" signature for git@github.com with ED25519 key SHA256:6UBhPb5SOoCUfasGC1/aCBegYov0/P3ajd6eNbYg77A -# - +``` ## 4. Troubleshooting