Host key verification should work when using all supported proxy recording modes.
Current behavior:
Connecting with auth_service.session_recording set to proxy:
$ ssh -F ~/.ssh/tsh_config tim@teleport-leaf.teleport-leaf.ethernet.fyi
The authenticity of host '[teleport-leaf.teleport-leaf.ethernet.fyi]:3022 (<no hostip for proxy command>)' can't be established.
RSA key fingerprint is SHA256:fe92uTOm5gKc23QYiWXeAuaZH/NR/xzq7PPA/2REHr0.
This key is not known by any other names.
Are you sure you want to continue connecting (yes/no/[fingerprint])? ^CERROR: context canceled
After disabling proxy recording mode, it works properly:
Expected behavior:
Host key verification should work when using all supported proxy recording modes.
Current behavior:
Connecting with
auth_service.session_recording
set toproxy
:After disabling proxy recording mode, it works properly:
Connections within the same cluster work as expected.
Bug details: