[Bug 3178] New: When authenticating with a -sk key, no 'touch security key' prompt displayed

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Mon Jun 8 06:11:50 AEST 2020


https://bugzilla.mindrot.org/show_bug.cgi?id=3178

            Bug ID: 3178
           Summary: When authenticating with a -sk key, no 'touch security
                    key' prompt displayed
           Product: Portable OpenSSH
           Version: 8.2p1
          Hardware: amd64
                OS: Linux
            Status: NEW
          Severity: minor
          Priority: P5
         Component: ssh
          Assignee: unassigned-bugs at mindrot.org
          Reporter: kanepyork at gmail.com

Created attachment 3408
  --> https://bugzilla.mindrot.org/attachment.cgi?id=3408&action=edit
Annotated log of ssh -v demonstrating the issue

When using a security key login that requires touch, no message is
printed by the client or server while waiting for the touch. On
security keys that support it, the light begins flashing, but this may
be hard to notice.

Excerpt from the attached session log:

debug1: Offering public key: /home/kane/.ssh/id_ecdsa_sk ECDSA-SK
SHA256:1bjhZUm1GLemKIhbwX33nP4zpLuW3VBPdH9kN1LH0bU explicit
authenticator agent
debug1: Server accepts key: /home/kane/.ssh/id_ecdsa_sk ECDSA-SK
SHA256:1bjhZUm1GLemKIhbwX33nP4zpLuW3VBPdH9kN1LH0bU explicit
authenticator agent
[[ Exchange hangs until sk touch ]]
Authenticated with partial success.

Some component - either the ssh client binary, or the agent - should
print a message along the lines of "Please touch your security key."
immediately before requesting a signature from a touch-required
security key. It may be awkward for the agent to determine the correct
terminal to print to, so I suggest the client relying on the
touch-required flag.

Issue found on Ubuntu 20.04.0

-- 
You are receiving this mail because:
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list