GNUPG-PKCS11-SCD-PROXY(1)

✨ NAME ✨

okay bestie, say hi to gnupg-pkcs11-scd-proxy — a GnuPG-compatible smart-card proxy daemon 💖 — and its partner in crime gnupg-pkcs11-scd-proxy-server, the GnuPG-compatible smart-card proxy server 🦋 — plus, you know, daemon energy overall. this is page gnupg-pkcs11-scd-proxy(1) from the LOCAL manual, and it's giving infrastructure 💅

🌸 SYNOPSIS 🌸

gnupg-pkcs11-scd-proxy [--multi-server] [--socket file] [--verbose]
                       [--log-file file] [--help]
gnupg-pkcs11-scd-proxy-server [--socket file] [--socket-group group]
                       [--scd file] [--scd-config file] [--verbose]
                       [--log-file file] [--help]

like yes, those are two whole binaries and yes you're gonna want to know both 🫶

👑 DESCRIPTION 👑

so here's the tea ☕ — gnupg-pkcs11-scd-proxy is a drop-in replacement for the smart-card daemon (scd) that ships with next-generation GnuPG (gnupg-2). no cap. it just slides right in where scd used to be.

this daemon is literally a proxy into gnupg-pkcs11-scd-proxy-server, which you can run inside a different security context so it can load the gnupg-pkcs11-scd smart-card daemon 🔥 security-context separation is the moment, honestly.

the way that the proxy and the server talk to each other? unix socket based, periodt. the assuan socket gets created world readable but with a specific user ACL, so only the user who initiated it can actually connect to the daemon. bestie-proof 🔒

the recommended version of gnupg is 2.1 — because in that version the gnupg-pkcs11-scd configuration doesn't specify any specific key information, which means it can be used as generic for all users 🌈 iconic behavior, truly.

the following options are available: 👇

💅 OPTIONS 💅

• --multi-server — run in multi-server mode (foreground, main character energy ✨). on top of talking over stdin/stdout, the server also opens an additional listening UNIX socket. two channels, one queen 👑
• --socket file — the socket name. the default should be sufficient, don't stress it 💖
• --socket-group group — a custom group to set for the proxy server socket. this may serve as a first level of access control 🛡️ so like, lowkey important.
• --scd file — where the smartcard daemon lives. again, the default should be sufficient 🌸
• --scd-config file — the smartcard daemon configuration. this one is a required parameter 🚨 not optional, not negotiable, it's mandatory bestie.
• --verbose — be verbose while running. yap away, we're listening 👂
• --no-detach — do not detach from the console (super useful for debugging purposes 🐛)
• --log-file file — output log to file 📝
• --help — print help information 🫶

and whenever the daemon catches any of the SIGHUP, SIGTERM and SIGINT signals, it cleans up and exits. graceful exit, no mess left behind, we love a clean girlie 💖

🦋 SEE ALSO 🦋

• gnupg-pkcs11-scd(1)
• gnupg-pkcs11 Home Page, http://gnupg-pkcs11.sourceforge.net.

🎀 AUTHORS AND COPYRIGHT 🎀

shoutout to the legends who built this 🙌

• Copyright (c) 2006-2007 Zeljko Vrba <zvrba@globalnet.hr>
• Copyright (c) 2006-2017 Alon Bar-Lev <alon.barlev@gmail.com>

All rights reserved.

and now the serious part, because legal text is legal text and we do not play with it 🙈 —

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

and that's the whole page, bestie 🫶 this one's from the POSIX-compatible crew, dated October 15, 2017, and it's filed under gnupg-pkcs11-scd-proxy(1). go forth and proxy responsibly, mwah 💋💖✨