On 11/08/17 18:51, Alexander Paetzelt | Nitrokey wrote:
> I try to get the max-cache-ttl-ssh in the gpg-agent.conf working,
> but the cache is still saved until physically disconnecting the gnupg
Unless this has been fixed already, this is probably because cache-ttl
has simply never worked for smartcards. They stay unlocked indefinitely.
> Furthermore I tried to disable the card after some time over
> ~/.gnupg/scdaemon.conf as a workaround with 'card-timeout 5', but no
> luck either.
I would have expected that to work, but have never used the option
myself. For GnuPG 2.1.18, the documentation comes with a caveat:
> Note that with the current version of Scdaemon the card is powered
> down immediately at the next timer tick for any value of n other than
> Is there some other service/program which is caching?
It's the card itself! It'll stay unlocked until told otherwise or