diff --git a/README.md b/README.md index 72a96a7..eabdbb8 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,16 @@ +--- +title: "PIS" +subtitle: "Policy for Internal Security" +#logo: "path/to/logo.png" +author: "Rémi Heredero " +language: "en" +tags: ["gpg", "ssh", "x509", "YubiKey", "security"] +toc: false +template: "simple" +#date: "2026-01-23" +#version: "0.0.1" +--- + # Policy for Internal Security This repo describes my P.I.S. (**P**olicy for **I**nternal **S**ecurity). You'll find my personal guidelines for SSH / GPG on YubiKey and how to configure and create a key / certificate. @@ -195,14 +208,6 @@ This creates the file `id_ed25519_sk-keyring-cert.pub` that is the certificate t --- -# x509 - -## Master YubiKey -I create a certificate in PIV slot 9a with Yubico authenticator. This CA would be used as a Root CA for my server. -TODO fix with XCA - ---- - # Troubleshooting ## GPG Sometimes, for unknown (for me) reason, you need to kill the gpg-agent to be able to use the YubiKey again.