Solo: ssh-add -K not working on macOS

Created on 2 Feb 2021  路  3Comments  路  Source: solokeys/solo

Split up issue from https://github.com/solokeys/solo/issues/374, as there is too much other things going on there


I'm not sure, if this is the right place but my team and me can't get ssh-add and ssh-add -K to work with the Solokey.
ssh-agent is just reporting Unable to add key ED25519-SK SHA256:XXXXXXXXXXX. More information below.

We've tried with resident and non-resident keys.

We're using the openssh from homebrew on macOS

Solo command output

max@computer /tmp % solo key credential ls
PIN: 
Relying Party       Username            Credential ID
ssh:                      openssh                 EXAMPLE

max@computer /tmp % solo key version
4.1.0 locked

OpenSSH version

max@computer /tmp % ssh-add -V
OpenSSH_8.4p1, OpenSSL 1.1.1i  8 Dec 2020

Running the failed ssh-add -K command

max@computer /tmp % ssh-add -v -K
Enter PIN for authenticator: 
debug1: start_helper: starting /usr/local/Cellar/openssh/8.4p1_2/libexec/ssh-sk-helper 
debug1: sshsk_load_resident: provider "internal", have-pin
debug1: sk_probe: 1 device(s) detected
debug1: sk_probe: selecting sk by touch
debug1: ssh_sk_load_resident_keys: trying IOService:/AppleACPIPlatformExpert/PCI0@0/AppleACPIPCI/XHC1@14/XHC1@14000000/HS07@14200000/Solo 4.1.0@14200000/Solo 4.1.0@0/AppleUserUSBHostHIDDevice
debug1: read_rks: existing 1, remaining 49
debug1: read_rks: Device IOService:/AppleACPIPlatformExpert/PCI0@0/AppleACPIPCI/XHC1@14/XHC1@14000000/HS07@14200000/Solo 4.1.0@14200000/Solo 4.1.0@0/AppleUserUSBHostHIDDevice has resident keys for 1 RPs
debug1: read_rks: rp 0: name="openssh" id="ssh:" hashlen=32
debug1: read_rks: RP "ssh:" has 1 resident keys
debug1: read_rks: Device IOService:/AppleACPIPlatformExpert/PCI0@0/AppleACPIPCI/XHC1@14/XHC1@14000000/HS07@14200000/Solo 4.1.0@14200000/Solo 4.1.0@0/AppleUserUSBHostHIDDevice RP "ssh:" slot 0: type -8 flag
s 0x00 prot 0x01
debug1: process_load_resident: key 0 ED25519-SK ssh:
debug1: ssh-sk-helper: reply len 165
debug1: sshsk_load_resident: keys[0]: ED25519-SK ssh:
Unable to add key ED25519-SK SHA256:XXXXXXXXXXX

/cc @fh1ch @bufferoverflow

Most helpful comment

Ohhh man. Thanks for this hint. Woah, I've just not restarted the ssh-agent. Spend hours with this already.

For other that run into the same problem:

killall ssh-agent
eval $(ssh-agent)
ssh-add -K

Thank you very much! 馃憤 馃挌

All 3 comments

As already mentioned on #374, it works for me pretty well on Ubuntu 20.10. The verbose output looks pretty similar.
Only the last line differs, showing success.

Could it be that your _agent_ does not support the key type? Does macOS bring its own ssh agent?

Ohhh man. Thanks for this hint. Woah, I've just not restarted the ssh-agent. Spend hours with this already.

For other that run into the same problem:

killall ssh-agent
eval $(ssh-agent)
ssh-add -K

Thank you very much! 馃憤 馃挌

Thanks! It also helped me! Just reloaded ssh-agent.

Was this page helpful?
0 / 5 - 0 ratings

Related issues

imp1sh picture imp1sh  路  10Comments

ghost picture ghost  路  7Comments

conorpp picture conorpp  路  3Comments

aseigler picture aseigler  路  6Comments

Frederick888 picture Frederick888  路  8Comments