maxgoedjen / secretive

Store SSH keys in the Secure Enclave
MIT License
7.16k stars 158 forks source link

ssh-agent does not forward added keys when Secretive SSH_AUTH_SOCK is added to .zshrc or IdentityAgent added to .ssh/config #402

Open dimitry-a-baranov opened 2 years ago

dimitry-a-baranov commented 2 years ago

MacOS ssh-agent does not forward added keys when Secretive SSH_AUTH_SOCK is added to ~/.zshrc or IdentityAgent added to ~/.ssh/config Identity is visible on MacOS itself, but is not forwarded to the remote system even If implicitly requested with

Host *
ForwardAgent yes
AddKeysToAgent yes
IdentityFile ~/.ssh/some_id_file
IdentityAgent /Users/<username>/Library/Containers/com.maxgoedjen.Secretive.SecretAgent/Data/socket.ssh

ssh-add -L on the target ssh box simply does not show the forwarded keys.

dimitry-a-baranov commented 2 years ago

Likely symptoms in https://github.com/maxgoedjen/secretive/issues/392#issue-1296101197, but in my case any attempt fails. Checked on MacOS 12.2.1-12.5 OpenSSH_8.6p1, LibreSSL 2.8.3 - OpenSSH_8.6p1, LibreSSL 3.3.6

rmrfslashbin commented 1 year ago

I've noted the same issues. Agent forwarding does not function as expected.