openssh-sk-winhello
openssh-sk-winhello copied to clipboard
You don't need this package anymore
Just want to share my experience with you. At the time of creating this issue, the latest version of OpenSSH on Windows is 9.5
> ssh -V
OpenSSH_for_Windows_9.5p1, LibreSSL 3.8.2
Here's an up-to-date article on how to install the latest OpenSSH, setup a FIDO2 and generate SSH key: https://www.upyesp.org/posts/winwdows-ssh-mfa-fido2-yubikey/
Now OpenSSH comes with FIDO2 support built-in, so you don't need to use any external plugins. Here's how I generated my SSH key:
ssh-keygen -t ed25519-sk -O resident -O verify-required -O user=USER -C "any comment here" -f $env:USERPROFILE\.ssh\id_ed25519_sk
Feel free to modify the following options:
-O user=USER
— replace USER with any name you want, like user=Vova for my name. As long as -O resident
is set, all your keys will be stored physically on the FIDO2 security key. So specifying name will help you to distinct multiple keys and store them simultaneously.
-O application=ssh:server1
— default application name will be ssh:
, you can distinct the keys by application name as well, in this case server1
can be your server's domain.
I guess the only reason to use this package nowadays is to work with WSL (I'm not sure, don't have experience with this)