Corinna Vinschen
Corinna Vinschen
Actually, the patch to ssh-agent was surprisingly simple. I tested it on Linux and Cygwin under WinHello, and it looks good on both systems.
> I force-pushed a less intrusive version of the previous patch. This patch now only drops the SSH_SK_USER_VERIFICATION_REQD flag if the device used for enrolling the key is [NOT] WinHello....
I forgot to add a sk_test_option function to the regress sk-dummy, sorry about that. Now added.
> > - If we enroll a verify-required key under WinHello on a standard > > "pinEntry" YubiKey, and if we drop the SSH_SK_USER_VERIFICATION_REQD flag, > > the key is...
> Apologies for being unclear. The output of `FIDO_DEBUG=1 ssh -vvv ` should suffice. I collected the debug logs. Two files attached, one of which is the log for a...