[Bug 3366] SSH should skip sk-* keys that don't match the connected security key

2023-10-11 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=3366 Damien Miller changed: What|Removed |Added Resolution|--- |FIXED Status|NEW

[Bug 3366] SSH should skip sk-* keys that don't match the connected security key

2021-12-02 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=3366 --- Comment #5 from Damien Miller --- >From Pedro, who knows way more about this than me: > Reverting b969072c would break the "uv handled by token" logic implemented in > f3c34df8. (I am including links to both commits at the bottom of this >

[Bug 3366] SSH should skip sk-* keys that don't match the connected security key

2021-11-22 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=3366 --- Comment #4 from Erik Jensen --- They are both standard YubiKey 5 NFC. I've attached two logs. The first is with plain OpenSSH_8.6p1, which requires two touches. The second is with OpenSSH patched to revert

[Bug 3366] SSH should skip sk-* keys that don't match the connected security key

2021-11-22 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=3366 --- Comment #3 from Erik Jensen --- Created attachment 3554 --> https://bugzilla.mindrot.org/attachment.cgi?id=3554=edit -vvv connection log with patch requiring only one touch -- You are receiving this mail because: You are watching someone

[Bug 3366] SSH should skip sk-* keys that don't match the connected security key

2021-11-22 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=3366 --- Comment #2 from Erik Jensen --- Created attachment 3553 --> https://bugzilla.mindrot.org/attachment.cgi?id=3553=edit -vvv connection log requiring two touches -- You are receiving this mail because: You are watching the assignee of the

[Bug 3366] SSH should skip sk-* keys that don't match the connected security key

2021-11-21 Thread bugzilla-daemon
https://bugzilla.mindrot.org/show_bug.cgi?id=3366 Damien Miller changed: What|Removed |Added CC||d...@mindrot.org --- Comment #1 from