PowerShell / PowerShell/Win32-OpenSSH
SSH login fails when a fido2 key has `verify-required` set for it on the server
Open
@tgauth is already working on this.
Since Oct 2, 2023.
Area-Authentication
Investigate
- Dominant language
- No language data
- Stars
- 8.3k
- Forks
- 819
- PR merge metrics
- No merged PRs in 30d
Description
Prerequisites
- Write a descriptive title.
- Make sure you are able to repro it on the latest version
- Search the existing issues.
Steps to reproduce
- On the server that you're connecting to via ssh, add
verify-requiredto the FIDO2 key. - Try to ssh into it.
Expected behavior
I should be able to connect to it via SSH.
Actual behavior
> ssh myserver
Confirm user presence for key ED25519-SK SHA256:MufoyNasWrapCyR9sP84dQvByUD2o18/kUxvfJKWmgs
User presence confirmed
user@myserver: Permission denied (publickey).
If I remove `verify-required`, I can connect just fine.
Error details
No response
Environment data
Name Value
---- -----
PSVersion 5.1.22621.1778
PSEdition Desktop
PSCompatibleVersions {1.0, 2.0, 3.0, 4.0...}
BuildVersion 10.0.22621.1778
CLRVersion 4.0.30319.42000
WSManStackVersion 3.0
PSRemotingProtocolVersion 2.3
SerializationVersion 1.1.0.1
OpenSSH_for_Windows_9.2p1, LibreSSL 3.7.2
Version
OpenSSH_for_Windows_9.2p1, LibreSSL 3.7.2
Visuals
No response
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.