pathetic piss kitten (@kitten)

@lunareclipse@snug.moe

9mo

EDIT: this is about using ssh keys stored in a FIDO2 security key, and specifically when you set them to require a PIN on each use

currently losing my mind because there isn't a single fucking piece of tooling around SSH that ever considered the possibility that you may need to enter a password at time of key use to use it, ssh-agent and gcr-ssh-agent both just explode and git can't sign a commit without an ssh-agent with the key unlocked

3

0

luna the doggie

@lunareclipse@snug.moe

9mo

this means that if you made an -sk key with the option that requires user verification to use it, well, it will not work for half of your shit have fun

2

0

pathetic piss kitten @kitten@elizabeth.cat

9mo

@lunareclipse that is not my experience, although I don't use my keys for signing

I use ssh-agent with the SSH_ASKPASS envvar for authentication

1

0

1

0

pathetic piss kitten @kitten@elizabeth.cat

9mo

@lunareclipse it was tricky to figure out at the beginning, that's for sure

1

0

1

0

luna the doggie

@lunareclipse@snug.moe

9mo

@kitten I tried using SSH_ASKPASS but gcr-ssh-agent doesn't support it so then I tried swapping that out for ssh-agent but no luck, "ssh agent refused operation"

2

0

pathetic piss kitten @kitten@elizabeth.cat

9mo

@lunareclipse have you added the key to the agent with ssh-add -K first?

2

0

1

0

pathetic piss kitten @kitten@elizabeth.cat

9mo

@lunareclipse (and do the ssh-agent logs say anything? I can share you my specific setup if your want)

1

0

1

0

luna the doggie

@lunareclipse@snug.moe

9mo

@kitten I'm honestly not sure if I have logs, I am interested in a working setup though yes

2

0

1

0

pathetic piss kitten @kitten@elizabeth.cat

9mo

@lunareclipse give me one

0

1

0