Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

You don't need this package anymore #19

Open
vova-lantsov-dev opened this issue Jul 26, 2024 · 2 comments
Open

You don't need this package anymore #19

vova-lantsov-dev opened this issue Jul 26, 2024 · 2 comments

Comments

@vova-lantsov-dev
Copy link

vova-lantsov-dev commented Jul 26, 2024

Just want to share my experience with you.
At the time of creating this issue, the latest version of OpenSSH on Windows is 9.5

> ssh -V
OpenSSH_for_Windows_9.5p1, LibreSSL 3.8.2

Here's an up-to-date article on how to install the latest OpenSSH, setup a FIDO2 and generate SSH key: https://www.upyesp.org/posts/winwdows-ssh-mfa-fido2-yubikey/

Now OpenSSH comes with FIDO2 support built-in, so you don't need to use any external plugins.
Here's how I generated my SSH key:

ssh-keygen -t ed25519-sk -O resident -O verify-required -O user=USER -C "any comment here" -f $env:USERPROFILE\.ssh\id_ed25519_sk

Feel free to modify the following options:
-O user=USER — replace USER with any name you want, like user=Vova for my name. As long as -O resident is set, all your keys will be stored physically on the FIDO2 security key. So specifying name will help you to distinct multiple keys and store them simultaneously.
-O application=ssh:server1 — default application name will be ssh:, you can distinct the keys by application name as well, in this case server1 can be your server's domain.

I guess the only reason to use this package nowadays is to work with WSL (I'm not sure, don't have experience with this)

@vova-lantsov-dev vova-lantsov-dev changed the title You don You don't need this package anymore Jul 26, 2024
@tavrez
Copy link
Owner

tavrez commented Jul 27, 2024

Hi,
Thanks for the report. Yes I'm aware of this, that's why I haven't updated this for newer versions of OpenSSH :)
All of this project functionalities are now inside the libfido2.

I should update the readme files to reflect this.

@NU11Payload
Copy link

NU11Payload commented Aug 21, 2024

I also wanted to add this - we're all github users..

How has no one tried git bash? As that was my work around, but seeing this, thank you so much. As there's been so many people that I've been trying to help out that are like asking me why I'm installing git bash on their computer because they already have git desktop I'll go ahead and test this out on my 5C tonight though thank you so much for sharing this

EDIT: By the way WSL doesn't work, though I am unsure if its because you need to enable their hyper V features on the new win11 update because I use to have no problem having my usb pass through. Now it does have issues.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants