PowerShell / Win32-OpenSSH

Win32 port of OpenSSH
7.2k stars 739 forks source link

Using `ssh-add` with a ecdsa_sk key with Windows Hello will still constantly prompt for Windows Hello. #2225

Open Lolle2000la opened 2 months ago

Lolle2000la commented 2 months ago

Prerequisites

Steps to reproduce

  1. Run ssh-add on a ecdsa_sk key.
  2. Unlock key using Windows Hello
  3. Commit something
  4. Commit something again

Expected behavior

When committing, no more prompts are shown.

Actual behavior

Every commit and regularly during running connections I am prompted for verification.

Error details

No response

Environment data

Name                           Value
----                           -----
PSVersion                      7.4.1
PSEdition                      Core
GitCommitId                    7.4.1
OS                             Microsoft Windows 10.0.22631
Platform                       Win32NT
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0…}
PSRemotingProtocolVersion      2.3
SerializationVersion           1.1.0.1
WSManStackVersion              3.0

Version

v9.5.0.0p1-Beta

Visuals

No response

tgauth commented 2 months ago

The ecdsa_sk is intended for fido auth via a security key, and the verification is to confirm the user's presence. Any usage of ecdsa_sk with Windows Hello is not officially supported yet.

In steps 3 and 4 of the repro, is the key being used for authentication? If so, the verification would be expected.