Mailing List Archive

[Bug 3491] Cannot import FIDO2 keys when macOS lockdown mode enabled
https://bugzilla.mindrot.org/show_bug.cgi?id=3491

Damien Miller <djm@mindrot.org> changed:

What |Removed |Added
----------------------------------------------------------------------------
CC| |djm@mindrot.org

--- Comment #1 from Damien Miller <djm@mindrot.org> ---
From the debug log, it appears that ssh-add was successfully
downloading the keys from your FIDO2 token, but failing to add them to
ssh-agent. I wonder if lockdown mode is simply breaking ssh-agent?

Could you confirm that key download works using "ssh-keygen -K"?

If that works, are you able to add them to ssh-agent directly using
ssh-add?

According to https://support.apple.com/en-us/HT212650 it is possible to
exempt particular applications from the lockdown. Maybe you could
exempt ssh-agent?

--
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.
_______________________________________________
openssh-bugs mailing list
openssh-bugs@mindrot.org
https://lists.mindrot.org/mailman/listinfo/openssh-bugs