search

kolide / launcher

Osquery launcher, autoupdater, and packager
https://kolide.com/launcher
Other
505 stars 102 forks source link

Missing ssh-sk support in `kolide_ssh_keys` #758

Open directionless opened 3 years ago

directionless commented 3 years ago

I'm starting to hear about ssh-sk keys, and this is not something we can parse in kolide_ssh_keys. The underlying key type is (a) based on hardware keys and (b) not supported in apple's ssh. (need brew's)

I don't have enough of a local test case, but my suspicion, is that I'll need to parse this from the public side. I'm not yet sure how to handle reconciliation between public and private. It may make sense to create a separate table for public and private keys. Or simply return a column with that info.

asinanis commented 2 years ago

Just adding this so I can close the Intercom ticket for now: https://app.intercom.com/a/apps/n62vrvsb/inbox/inbox/all/conversations/27252684079