Win32-OpenSSH icon indicating copy to clipboard operation
Win32-OpenSSH copied to clipboard

Using `ssh-add` with a ecdsa_sk key with Windows Hello will still constantly prompt for Windows Hello.

Open Lolle2000la opened this issue 1 year ago • 1 comments
trafficstars

Prerequisites

  • [X] Write a descriptive title.
  • [X] Make sure you are able to repro it on the latest version
  • [X] Search the existing issues.

Steps to reproduce

  1. Run ssh-add on a ecdsa_sk key.
  2. Unlock key using Windows Hello
  3. Commit something
  4. Commit something again

Expected behavior

When committing, no more prompts are shown.

Actual behavior

Every commit and regularly during running connections I am prompted for verification.

Error details

No response

Environment data

Name                           Value
----                           -----
PSVersion                      7.4.1
PSEdition                      Core
GitCommitId                    7.4.1
OS                             Microsoft Windows 10.0.22631
Platform                       Win32NT
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0…}
PSRemotingProtocolVersion      2.3
SerializationVersion           1.1.0.1
WSManStackVersion              3.0

Version

v9.5.0.0p1-Beta

Visuals

No response

Lolle2000la avatar Apr 16 '24 04:04 Lolle2000la

The ecdsa_sk is intended for fido auth via a security key, and the verification is to confirm the user's presence. Any usage of ecdsa_sk with Windows Hello is not officially supported yet.

In steps 3 and 4 of the repro, is the key being used for authentication? If so, the verification would be expected.

tgauth avatar Apr 22 '24 17:04 tgauth