PowerShell / PowerShell/Win32-OpenSSH

SSH login fails when a fido2 key has `verify-required` set for it on the server

Open
#2,156 1 comment 0 reactions 2 assignees View on GitHub

@tgauth is already working on this.

Since Oct 2, 2023.

Area-Authentication Investigate
Dominant language
No language data
Stars
8.3k
Forks
819
PR merge metrics
No merged PRs in 30d

Description

Prerequisites
  • Write a descriptive title.
  • Make sure you are able to repro it on the latest version
  • Search the existing issues.
Steps to reproduce
  1. On the server that you're connecting to via ssh, add verify-required to the FIDO2 key.
  2. Try to ssh into it.
Expected behavior
I should be able to connect to it via SSH.
Actual behavior
> ssh myserver
Confirm user presence for key ED25519-SK SHA256:MufoyNasWrapCyR9sP84dQvByUD2o18/kUxvfJKWmgs                                          
User presence confirmed                                                                                                              
user@myserver: Permission denied (publickey). 


If I remove `verify-required`, I can connect just fine.
Error details

No response

Environment data
Name                           Value                                                                                                 
----                           -----                                                                                                 
PSVersion                      5.1.22621.1778                                                                                        
PSEdition                      Desktop                                                                                               
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0...}                                                                               
BuildVersion                   10.0.22621.1778                                                                                       
CLRVersion                     4.0.30319.42000                                                                                       
WSManStackVersion              3.0                                                                                                   
PSRemotingProtocolVersion      2.3                                                                                                   
SerializationVersion           1.1.0.1
OpenSSH_for_Windows_9.2p1, LibreSSL 3.7.2
Version

OpenSSH_for_Windows_9.2p1, LibreSSL 3.7.2

Visuals

No response

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.