Confusion using "ssh-add -D" and then "ssh-add -l"

Brian Candler b.candler at pobox.com
Fri Oct 18 22:52:33 AEDT 2024


On 18/10/2024 11:38, Chris Green wrote:
>      chris$ ssh-add -l
>      256 SHA256:4XDYbepg8zK43pofpQ8IGxMAXkej298a0XZHWjJTIQQ chris at q957 (ED25519)
>      3072 SHA256:yeQw8xe9rrxHKLqICoXNwReZKKV9HI1UeTCf95QywXM chris at t470 (RSA)
>      256 SHA256:dluRgJeTqJ32jKxRrSdjr/cibbIOZQeq8Inlna3+Sdw chris at q957 (ED25519)
>      256 SHA256:gl9l9m/xnYpL9P7WkL60L+FcJ0+r2c5Ci770p9VEC08 chris at q957 (ED25519)
>      3072 SHA256:dJws+ny7+uWMo2hwFl6yNGE5vFsW1ZKiO0EXwTIfNPc chris at t470 (RSA)
>      256 SHA256:BxqEiksrCXPxKvQyBXqOqw1WKda110lYiC00Z+fKP4A chris at q957 (ED25519)
>      chris$ ssh-add -D
>      All identities removed.
>      chris$ ssh-add -l
>      256 SHA256:4XDYbepg8zK43pofpQ8IGxMAXkej298a0XZHWjJTIQQ chris at q957 (ED25519)
>      3072 SHA256:yeQw8xe9rrxHKLqICoXNwReZKKV9HI1UeTCf95QywXM chris at t470 (RSA)
>      256 SHA256:dluRgJeTqJ32jKxRrSdjr/cibbIOZQeq8Inlna3+Sdw chris at q957 (ED25519)
>      256 SHA256:gl9l9m/xnYpL9P7WkL60L+FcJ0+r2c5Ci770p9VEC08 chris at q957 (ED25519)
>      3072 SHA256:dJws+ny7+uWMo2hwFl6yNGE5vFsW1ZKiO0EXwTIfNPc chris at t470 (RSA)
>      256 SHA256:BxqEiksrCXPxKvQyBXqOqw1WKda110lYiC00Z+fKP4A chris at q957 (ED25519)
>      chris$
>
> I guess I'm misunderstanding something but I don't see what at the moment.

Platform? ssh version? What's acting as the ssh-agent?

It works fine for me:

% ssh-add -l
2048 SHA256:mVV81jWVCP/SDRFA7vRM/SDQniylCAcBoSERWyhAXEo 
/Users/brian/.ssh/id_rsa (RSA)
384 SHA256:zUsLa+byMzU+Q3l2HGjfH++SyjdKjr0+imT9jSsEYcY 
vault-6304493e-deploy (ECDSA-CERT)
% ssh-add -D
All identities removed.
% ssh-add -l
The agent has no identities.
%

This is with macOS 14.7, OpenSSH_9.7p1 from homebrew. macOS has started 
a "/usr/bin/ssh-agent -l" process which I believe is from Apple's 
installation of OpenSSH_9.7p1 (according to /usr/bin/ssh -V)


More information about the openssh-unix-dev mailing list