Launchpad itself

Add support for FIDO2 SSH keys

Bug #2002857 reported by Andrea Ieri
24
This bug affects 5 people
Affects Status Importance Assigned to Milestone
Launchpad itself
Triaged
Low
Unassigned

Bug Description

Launchpad doesn't currently support ecdsa-sk and ed25519-sk keys. When trying to add either to my user I receive error "Invalid public key". Please add support for FIDO2 keys, at least non-resident, user-presence only ones.

Revision history for this message
Colin Watson (cjwatson) wrote :

This is possible, but it requires adding explicit support for those key types to Twisted since unfortunately these key types are different in the actual protocol, and frankly I burned out a bit on this kind of thing after the massive saga that was https://www.chiark.greenend.org.uk/~cjwatson/blog/lp-new-ssh-features.html. Maybe somebody else fancies tackling the Twisted side of this one?

tags: added: lp-registry ssh
Changed in launchpad:
status: New → Triaged
importance: Undecided → Low
Revision history for this message
Colin Watson (cjwatson) wrote :

https://github.com/openssh/openssh-portable/blob/master/PROTOCOL.u2f has the protocol-level details.

Revision history for this message
Tobias Heider (tobhe) wrote (last edit ):

Just stumbled upon this bug. Looks like someone is working on FIDO key support for twisted: https://github.com/twisted/twisted/pull/12002

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.