Skip to content

Update instructions for Sonoma 14.6+ (#54) #56

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

micolous
Copy link

@micolous micolous commented Feb 18, 2025

Fixes #54 (well, works around the new normal).

This documents the workarounds I've provided here, which is the only way that works with Apple's stock ssh-agent LaunchAgent configuration and does not rely on exploiting launchd security weaknesses.

The Homebrew formula will need to be updated to patch the new default paths in the plist: theseal/homebrew-ssh-askpass#20

I've made a couple of changes to the plist, because they have no effect on Apple ssh-agent Sonoma 14.6 and later:

  • Remove setting DISPLAY with launchctl setenv
  • Don't stop com.openssh.ssh-agent (Apple's ssh-agent)

The Homebrew formula could be replaced with a cask to automate this stuff. I'll add an issue for that later.

This should work even if you installed your own ssh-agent to replace Apple's, as long as it checks /usr/X11R6/bin/ssh-askpass.

While this doesn't fix usage of third-party authentication modules like FIDO2, that's totally unrelated to ssh-askpass.

Feedback needed

  • This assumes that MacPorts always installs to /usr/local/bin. Homebrew uses different paths on Apple Silicon and Intel. It's been /opt/local for at least a decade, fixed.

@Vlad1mir-D
Copy link

Or you find this PR, you can simply use https://github.com/Vlad1mir-D/ssh-askpass which already contains everything merged properly :)

@micolous
Copy link
Author

micolous commented May 26, 2025

You copied my commits into your own fork and merged to the default branch. Anyone can get the same by clicking the micolous:fix-sonoma-14.6 link at the top of this page. Slow clap.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Sonoma 14.6 breaks ssh-askpass
3 participants