openssh-sk-winhello icon indicating copy to clipboard operation
openssh-sk-winhello copied to clipboard

You don't need this package anymore

Open vova-lantsov-dev opened this issue 7 months ago • 2 comments

Just want to share my experience with you. At the time of creating this issue, the latest version of OpenSSH on Windows is 9.5

> ssh -V
OpenSSH_for_Windows_9.5p1, LibreSSL 3.8.2

Here's an up-to-date article on how to install the latest OpenSSH, setup a FIDO2 and generate SSH key: https://www.upyesp.org/posts/winwdows-ssh-mfa-fido2-yubikey/

Now OpenSSH comes with FIDO2 support built-in, so you don't need to use any external plugins. Here's how I generated my SSH key:

ssh-keygen -t ed25519-sk -O resident -O verify-required -O user=USER -C "any comment here" -f $env:USERPROFILE\.ssh\id_ed25519_sk

Feel free to modify the following options: -O user=USER — replace USER with any name you want, like user=Vova for my name. As long as -O resident is set, all your keys will be stored physically on the FIDO2 security key. So specifying name will help you to distinct multiple keys and store them simultaneously. -O application=ssh:server1 — default application name will be ssh:, you can distinct the keys by application name as well, in this case server1 can be your server's domain.

I guess the only reason to use this package nowadays is to work with WSL (I'm not sure, don't have experience with this)

vova-lantsov-dev avatar Jul 26 '24 16:07 vova-lantsov-dev