WinCryptSSHAgent icon indicating copy to clipboard operation
WinCryptSSHAgent copied to clipboard

Xshell8 Build 0060 + Yubikey出现“Received an empty signature from ssh-agent”

Open Zerek-Cheng opened this issue 1 year ago • 3 comments

用的是v1.1.9构建版,yubikey 5C,写了一个PIV-9A槽 其他都是空着的。

[23:00:39] Version exchange initiated...
[23:00:39] 	server: SSH-2.0-OpenSSH_7.4
[23:00:39] 	client: SSH-2.0-nsssh2_8.0.0008 NetSarang Computer, Inc.
[23:00:39] 	SSH2 is selected.
[23:00:39] Algorithm negotiation initiated... (Dialog mode)
[23:00:39] 	key exchange: [email protected]
[23:00:39] 	host key: rsa-sha2-256
[23:00:39] 	outgoing encryption: [email protected]
[23:00:39] 	incoming encryption: [email protected]
[23:00:39] 	outgoing mac: [email protected]
[23:00:39] 	incoming mac: [email protected]
[23:00:39] 	outgoing compression: none
[23:00:39] 	incoming compression: none
[23:00:40] Host authentication initiated...
[23:00:40] 	Hostkey fingerprint:
[23:00:40] 	rsa 2048 **********************************************
[23:00:40] 	Accepted. Verifying host key...
[23:00:40] 	Verified.
[23:00:40] 	server-sig-algs = rsa-sha2-256,rsa-sha2-512
[23:00:40] User authentication initiated... (Dialog mode)
[23:00:40] 	Sent user name 'cloud'.
[23:00:40] 	Server support public key authentication method.
[23:00:40] 	Trying to find ssh-agent...
[23:00:40] 	Xagent is running. Connecting to ssh-agent...
[23:00:40] 	Received 2 identity-blob(s) from ssh-agent.
[23:00:40] 	Trying next identity blob...
[23:00:40] 	Received PK_OK packet. Try to send signed key blob.
[23:00:40] 	Sent sign request to ssh-agent. rsa-sha2-512
[23:00:40] 	Received an empty signature from ssh-agent.
[23:00:40] 	Trying next identity blob...
[23:00:40] 	Server rejected the public blob, 
[23:00:40] 	No more keys to try.
[23:00:40] 	Fall back to normal user authentication steps.
[23:00:40] 	Canceled.

生成的key是rsa 2048位的

Zerek-Cheng avatar Nov 14 '24 15:11 Zerek-Cheng

试过WinSSH环境下是正常的

Zerek-Cheng avatar Nov 14 '24 15:11 Zerek-Cheng

更新至Xshell8 Build 0063,仍然无法通过

Zerek-Cheng avatar Nov 14 '24 15:11 Zerek-Cheng

试试我的补丁。

https://github.com/buptczq/WinCryptSSHAgent/pull/91

也可以直接用我编译的版本 https://github.com/zzmark/WinCryptSSHAgent/releases/tag/v1.1.10-debug

zzmark avatar Nov 22 '24 09:11 zzmark