azure-cli icon indicating copy to clipboard operation
azure-cli copied to clipboard

Enable ed25519 support in CLI for Public Preview

Open srijang opened this issue 2 years ago • 9 comments

Related command

Is your feature request related to a problem? Please describe.

Describe the solution you'd like

Describe alternatives you've considered

Additional context

srijang avatar Oct 25 '23 20:10 srijang

Thank you for opening this issue, we will look into it.

yonzhan avatar Oct 25 '23 20:10 yonzhan

Please provide more detailed info such as CLI command and swagger spec link.

yonzhan avatar Oct 26 '23 02:10 yonzhan

hey @yonzhan, we need assistance with a new feature we're rolling out. We're modifying the generateSshKeyPair API and need to update the CLI to reflect those changes. The generateSshKeyPair now has a response body that takes in the "encryptionType" property. The allowed values of this property are either "RSA" or "Ed25519". Looking at our existing docs, this cli will need to get updated: https://learn.microsoft.com/en-us/cli/azure/vm?view=azure-cli-latest#az-vm-create (--generate-ssh-keys). One possible update would be to turn this from a true/false to a flag that requires a property. I've pasted the Swagger Spec below:

https://github.com/Azure/azure-rest-api-specs/pull/26090

kamusta-msft avatar Oct 26 '23 21:10 kamusta-msft

@kamusta-msft @srijang Could you please use this template [Microsoft Internal / Service Team] Feature Request to create this feature request? It contains more necessary information for us to develop, such as whether the Python SDK is ready and the ETA. Then we will evaluate the effort and priority of it to plan its development and release.

zhoxing-ms avatar Oct 27 '23 04:10 zhoxing-ms

Damn, finally this feature is getting worked on, wow, RSA was getting a bit old, I'm happy it's moving forward.

AkechiShiro avatar Oct 30 '23 01:10 AkechiShiro

The Azure CLI is supporting this but Key Vault is only supporting RSA or ECC. When is it expected to be released across both?

az-vm-create

dayanidhikrishna avatar Oct 19 '24 06:10 dayanidhikrishna

I'll also add that the Azure STA does not support ed25519 as of now. Despite, support having landed for VM ssh authentication

AkechiShiro avatar Oct 19 '24 13:10 AkechiShiro

Azure CLI has already supported Ed25519 when creating a VM. You can run "az vm create" command with "--generate-ssh-keys --ssh-key-type Ed25519" parameters to generate Ed25519 SSH key when creating a VM

yanzhudd avatar Oct 21 '24 06:10 yanzhudd

Yes that is true but one cannot store the key pair in the Key Vault

dayanidhikrishna avatar Oct 21 '24 13:10 dayanidhikrishna