You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I have no objection to that policy, but I think it's worth a mention in the README, as other Yubikey/SSH solution have defaulted to much shorter expiration lengths.
The text was updated successfully, but these errors were encountered:
SSH keys don't have expiration dates, that timestamp is only there because it's a required field of the X.509 certificate that is just used as a way to get PIV to store the public key. Even if it were in the past, everything would keep working, and no one outside the YubiKey would know.
From reading the source code, it appears the key generated during setup expires in 42 years or essentially never:
https://github.com/FiloSottile/yubikey-agent/blob/main/setup.go#L163
I have no objection to that policy, but I think it's worth a mention in the README, as other Yubikey/SSH solution have defaulted to much shorter expiration lengths.
The text was updated successfully, but these errors were encountered: