PowerShell / PowerShell/Win32-OpenSSH

Using `ssh-add` with a ecdsa_sk key with Windows Hello will still constantly prompt for Windows Hello.

Open
#2,225 1 comment 2 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Area-Authentication Issue-Enhancement
Dominant language
No language data
Stars
8.3k
Forks
819
PR merge metrics
No merged PRs in 30d

Description

Prerequisites
  • Write a descriptive title.
  • Make sure you are able to repro it on the latest version
  • Search the existing issues.
Steps to reproduce
  1. Run ssh-add on a ecdsa_sk key.
  2. Unlock key using Windows Hello
  3. Commit something
  4. Commit something again
Expected behavior
When committing, no more prompts are shown.
Actual behavior
Every commit and regularly during running connections I am prompted for verification.
Error details

No response

Environment data
Name                           Value
----                           -----
PSVersion                      7.4.1
PSEdition                      Core
GitCommitId                    7.4.1
OS                             Microsoft Windows 10.0.22631
Platform                       Win32NT
PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0…}
PSRemotingProtocolVersion      2.3
SerializationVersion           1.1.0.1
WSManStackVersion              3.0
Version

v9.5.0.0p1-Beta

Visuals

No response

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Reproduce the repeated Windows Hello prompts with ssh-add and an ecdsa_sk key on the stated Windows and OpenSSH versions. Trace the ssh-add authentication flow and its interaction with Windows Hello; done means one verification unlock is sufficient for subsequent commits and running connections.

Written by the indexing model from the issue text.

Assessment

Domain
authentication, cli, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.