Open greg-dfo opened 4 years ago
Did you add a TrustedUserCAKeys line sshd_config?
TrustedUserCAKeys __PROGRAMDATA__/ssh/trusted_ssh_ca_keys
It definitely works for me (OpenSSH_for_Windows_8.1p1, LibreSSL 2.9.2)
Oh nm, you meant using the windows client to connect to a server that otherwise works. I think there is a hint in this:
debug1: sign_and_send_pubkey: no separate private key for certificate "GregDFO-cert.pub" Load key "GregDFO-cert.pub": invalid format
Try naming the files so the pub and cert get picked up as defaults (using GregDFO, GregDFO.pub and keeping GregDFO-cert.pub), then pass -i GregDFO, it should pick up the rest.
Did you add a TrustedUserCAKeys line sshd_config?
TrustedUserCAKeys __PROGRAMDATA__/ssh/trusted_ssh_ca_keys
It definitely works for me (OpenSSH_for_Windows_8.1p1, LibreSSL 2.9.2)
Could you share the setup you have which is working?
I'm trying to set this up myself, and my windows sshd is complaining :
sshd: userauth_pubkey: unsupported public key algorithm: rsa-sha2-256-cert-v01@openssh.com [preauth]
Are the certs you're using signed with a different algorithm?
"OpenSSH for Windows" version
OpenSSH_for_Windows_8.0p1, LibreSSL 2.6.5
Client OperatingSystem Windows 10 Enterprise
Does OpenSSH for Windows support signed certs?
I feel like it does, as ssh-keygen picks up the certificate no problem. However, it doesn't want to connect. The same steps seem to work fine from linux.
However, when trying to use it, ssh spits out invalid format
A few extra verbose tidbits