baumerits / putty-pkix

Putty with x509v3-sign-rsa key type and CryptoAPI based Smartcard implementation
Other
5 stars 1 forks source link

putty-pkix-v0.73: "Server refused our key" #2

Open wylda opened 4 years ago

wylda commented 4 years ago

Hi, i have an issue with keys protected by TPM. But there seems to be an easy work around

This does not work ("Server refused our key"): x509://thumbprint=aaac12a93dad48260c373189b4b3e08dfaaecaaa

But this one works perfectly: cert://thumbprint=aaac12a93dad48260c373189b4b3e08dfaaecaaa

Thank you for your great work!

rba commented 4 years ago

Hi wylda,

Keep in mind that the prefix x509:// is using the not often used x509v3-sign-rsa key type which was part of an earlier draft.

While the prefix cert:// is fully compatible to the ssh-rsa key type, as the version from Ulf Frisk (https://github.com/ufrisk/puttywincrypt) does.

Both should key types work with the ssh from Roumen Petrov (https://roumenpetrov.info/secsh/).

Thank you for your feedback.