[Bug 3911] sk_select_by_cred doesn't detect internal_uv device when multiple devices are connected

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Fri Jan 16 13:18:17 AEDT 2026


https://bugzilla.mindrot.org/show_bug.cgi?id=3911

--- Comment #2 from Jonathan <jonathan.underwood4649 at gmail.com> ---
It seems like this logic fails to set the assert's uv flag. (Which is
understandable since this function is attempting to probe the security
keys without interaction from the user)

This causes the Yubikey BIO to silently fail and return a "no
credential found" even when the credential is found.

I have written a small (hacky) patch on top of
a6f8f793d427a831be1b350741faa4f34066d55f and will attach to this bug.

I originally thought this might be an issue with libfido2 so I opened a
discussion there as well and it brought me here.

https://github.com/Yubico/libfido2/discussions/926#discussioncomment-15508265

Please give guidance if my patch is not up to the standards of this
project.

Thank you in advanced.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list