pwncollege / dojo

Infrastructure powering the pwn.college dojo
https://pwn.college
BSD 2-Clause "Simplified" License
285 stars 89 forks source link

SSH: Support FIDO-based Login #329

Open adamdoupe opened 7 months ago

adamdoupe commented 7 months ago

Some users have requested to be able to use their FIDO/YUBI key ssh key.

sk-ecdsa-sha2-nistp256@openssh.com
sk-ssh-ed25519@openssh.com

Info is here (not sure if we need to enable/change the sshd config): https://cryptsus.com/blog/how-to-configure-openssh-with-yubikey-security-keys-u2f-otp-authentication-ed25519-sk-ecdsa-sk-on-ubuntu-18.04.html

sjzhu commented 7 months ago

Thanks adam! I think this regex would also need to be changed (because of the @openssh.com that's part of the protocol). https://github.com/pwncollege/dojo/blob/628f9eb36131ae6e100983e9d2d5e7026eaec66d/dojo_plugin/api/v1/ssh_key.py#L26