See GitLab 14.8 (February 2022) Support for ecdsa-sk and ed25519-sk SSH keys 2022: those security keys should be supported on GitLab now. Nevertheless, I now have the problem that GitLab doesn't support security keys yet: issue 213259įeb. It is on my side with the latest Git for Windows: ssh -V Type export SSH_SK_HELPER=/usr/lib/ssh/ssh-sk-helper.exe first, as seen in tavrez/openssh-sk-winhello issue 1.Ĭheck your OpenSSH version is at least 8.2. If this fails also with -t ecdsa, try and using a plugin for OpenSSH to connect to FIDO/U2F security keys through native Windows Hello APIs might help.
Your error message looks like a bug in progress on Debian: " issue 980393: /usr/bin/ssh-keygen -t ecdsa-sk fails with "Key enrollment failed: invalid format"".Īnd it is still being reported this month. So: it is true Security keys are now supported for SSH Git operations, as announced early this month (May 2021) on GitHub, but, as discussed here, there are still issues. Or: How do I install libfido2 if this is the problem? So my question: how do I manage to use my Yubikey instead of my local key? Now I also read something about libfido2, however I can't find any instructions on how to use it on Windows 10. I have already successfully stored an OpenPGP certificate on the Yubikey.) The attempt with ecdsa-sk leads to the same result. The interesting thing: The message looks exactly the same, whether I have inserted the Yubikey or not does not matter. You may need to touch your authenticator to authorize key generation.īefore that, I am prompted to enter the PIN. this one ) lead to the same error message for me: $ ssh-keygen -t ed25519-sk -C public/private ed25519-sk key pair. Now I would like to use the Yubikey instead of the certificate stored locally on the computer.
In the meantime I managed to connect to the server with Git Bash and SSH using a locally generated SSH certificate.
Unfortunately, the documentation here assumes a lot of prior knowledge and I am an absolute beginner on the subject. I then decided to deal with it on Windows 10 via Git Bash and SSH. After buying a Yubikey 5 NFC for technical interest (firmware 5.2.7) and setting up FIDO2 authentication where possible, I ran into the problem that I could no longer connect to my GitLab server via SmartGit because the second factor is not requested and therefore I can't connect to the server.
0 kommentar(er)
