Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Issue with SSH Login Using ed25519-SK Key on YubiKey Bio #10694

Open
DumbSheep123 opened this issue Feb 11, 2025 · 0 comments
Open

Issue with SSH Login Using ed25519-SK Key on YubiKey Bio #10694

DumbSheep123 opened this issue Feb 11, 2025 · 0 comments
Assignees
Labels
ssh Issue in vscode-remote SSH

Comments

@DumbSheep123
Copy link

When logging in via SSH using an ed25519-SK key tied to a YubiKey Bio (fingerprint authentication), the process introduces an unnecessary and persistent text input field.

Expected Behavior

  1. The user initiates SSH authentication.

  2. The terminal prompts: Confirm user presence for key ED25519-SK SHA256:[HASH]

  3. Once the user confirms via fingerprint, the terminal responds: User presence confirmed

  4. The login completes successfully.

Observed Issue

When using the same key, this time predefined in ~/.ssh/config (for convenience), the authentication flow is similar, but different:

  1. Upon SSH login through the Remote-SSH extension, a text input field appears instead of the usual fingerprint prompt of SSH.

    • The presence of this field suggests something is listening, but authentication can proceed without interacting with it (except to dismiss it).
  2. If the user confirms fingerprint authentication without interacting with the text field, the server successfully authenticates the session, but the input field remains open and non-functional.

  3. If authentication fails or times out:

    • The system prompts for the key’s PIN.

    • After entering the PIN, it requests fingerprint authentication again.

    • The text input field remains visible and unresponsive, even after successful authentication and PIN verification.

Impact

  • The lingering input field serves no function and does not close automatically, leading to confusion.

  • Unless manually dismissed (e.g., by pressing Esc), it obstructs normal interaction.

Suggested Resolution

The SSH authentication flow should either:

  • The SSH authentication flow should not display a text input field unless user action (e.g., PIN authentication) is required.

  • Automatically dismiss the text input once authentication succeeds.

@vs-code-engineering vs-code-engineering bot added the ssh Issue in vscode-remote SSH label Feb 11, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
ssh Issue in vscode-remote SSH
Projects
None yet
Development

No branches or pull requests

3 participants