search

fork-dev / Tracker

Bug and issue tracker for Fork for Mac
505 stars 12 forks source link

[Feature] Support OpenSSH SK key types (FIDO/U2F token) better #1274

Open cortices opened 3 years ago

cortices commented 3 years ago

Fork currently does work with ecdsa_sk and similar OpenSSH key types (available since v8.2, when compiled with libfido2) which use FIDO tokens to authenticate keys instead of a passphrase. However, it pops up a spurious password dialog when doing so. Simply activating the hardware token and hitting Ok on the dialog without entering anything causes a successful authentication process.

Better support would replace the password dialog with a popup reading something along the lines of "Activate hardware token..." with only a Cancel button, and automatically dismiss itself when the hardware token is activated and OpenSSH proceeds with the connection.

DanPristupov commented 3 years ago

How does it work in command line? What should I do to configure this?

However, it pops up a spurious password dialog when doing so.

Can you show a screenshot of the that dialog, please?

cortices commented 3 years ago

Info on installed openssh version, showing compiled with libfido2 support:

image

Creation of an ecdsa-sk key type (with a FIDO USB token inserted)

image

The dialogue that appears when authenticating using an ecdsa-sk key

image