https://bugzilla.mindrot.org/show_bug.cgi?id=3911

--- Comment #5 from Jonathan <[email protected]> ---
I just verified that the output with Yubikey BIO of

ssh-keygen -t ed25519-sk -O resident -O application=ssh:biotest -O
verify-required

Has the UV REQ flag set in the sshkey file.

However, immediately running

ssh-keygen -K

will output an sshkey file that does not have the UV REQ flag.

So as long as the Yubikey Resident key user keeps the keyfile they
generated in the beginning, they should be fine and that's probably why
no one hit this before.

I think there is enough information here. So I will stop my work for
now and await your response.

I noticed there were some unused variables. I will add their removal to
my patch.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
[email protected]
https://lists.mindrot.org/mailman/listinfo/openssh-bugs

Reply via email to