[Bug 3815] ssh-verify-attestation fails to check attestation

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Mon Apr 21 23:59:54 AEST 2025


https://bugzilla.mindrot.org/show_bug.cgi?id=3815

--- Comment #4 from Aleks <at at symbiosis.finance> ---
(In reply to Damien Miller from comment #3)
> Maybe try adding -U to the command-line. This is required if you're
> using a U2F rather than a FIDO2 token - it's not possible to
> automatically detect this at present.
> 
> This tool is also pretty experimental, there may be bugs...

with -U the output is exactly the same. 


Btw, this tool successfully validates the attestation 

https://gist.github.com/joostd/ed790ade9ddd4b711af6c1b80eaed7ca

may be it could be useful to understand what is happening.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list