Foxboron / ssh-tpm-agent

:computer: :key: ssh-agent for TPMs
MIT License
354 stars 20 forks source link

`ssh-tpm-keygen --import` does not invoke `ksshaskpass` #54

Closed nl6720 closed 4 months ago

nl6720 commented 4 months ago
$ ssh-keygen -t ecdsa -b 384 -f ~/.ssh/id_ecdsa-TEST"
...
$ ssh-tpm-keygen --import ~/.ssh/id_ecdsa-TEST -b 384
Sealing an existing public/private key pair.
2024/06/24 16:40:48 bcrypt_pbkdf: empty password

ssh-keygen launches the ksshaskpass password input dialog window, while ssh-tpm-keygen doesn't.

$ printenv SSH_ASKPASS SSH_ASKPASS_REQUIRE
/usr/bin/ksshaskpass
prefer

Using: ssh-tpm-agent 0.5.0-1 ksshaskpass 6.1.0-1

nl6720 commented 4 months ago

Simple ssh usage fails too.

time=2024-06-24T17:08:17.314+03:00 level=INFO msg="agent 13: failed to sign: TPM_RC_AUTH_FAIL (session 1): the authorization HMAC check failed and DA counter incremented"