windows-fido-bridge
wsl2-ssh-pageant
Our great sponsors
| windows-fido-bridge | wsl2-ssh-pageant | |
|---|---|---|
| 1 | 8 | |
| 114 | 309 | |
| - | - | |
| 0.0 | 1.7 | |
| over 1 year ago | almost 2 years ago | |
| C++ | Go | |
| Apache License 2.0 | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
windows-fido-bridge
-
Tell HN: GitHub no longer supporting unauthenticated `git://`
> Because AFAIK, (Fido) yubikey support is still missing.
Correct, hopefully Microsoft will provide an updated SSH client soon. It only requires recompiling OpenSSH with the correct flags.
Alternatively, use these build instruction for openssh with FIDO for windows:
https://gist.github.com/martelletto/6a7cf806c6433ac9ce71d66a...
> Using either the PKCS#11 support or the gpg applet requires some extra piece of software
For those wanting to do that, here are some ways:
Using a premade dll:
https://github-wiki-see.page/m/mooltipass/minible/wiki/Setti...
Or with a middleware:
https://github.com/mgbowen/windows-fido-bridge
Using the Hello API:
https://github.com/tavrez/openssh-sk-winhello
Given how many people came with their own ways, I believe there's enough demand for Microsoft to fix that.
wsl2-ssh-pageant
-
Using Unix sockets with WSL2 on Windows Store -> How to Use Unix Sockets with WSL2 on Windows Store
Hey there! So, I've been using WSL2 with a yubikey for gpg, which is pretty sweet. Basically, this setup uses a Unix socket to Windows gpg-agent and pageant (if you're curious, you can find all the details in this GitHub repo: https://github.com/BlackReloaded/wsl2-ssh-pageant). It's been working great for about a month or so, until I recently installed the Windows Store version for WSLg support on Windows 10. But now, my WSL2 isn't talking to the Win gpg-agent anymore. I've searched GitHub for answers, but no luck yet. Figured I'd post here and see if there are others in the same boat or who might have some tips on this pesky socket issue. Thanks!
- Unix sockets + WSL2 win store
-
If you want to use Yubikey from WSL2 (socat passthrough), install gpg4win 3.1.16, NOT the latest (4.0) one
You should use the latest wsl2-ssh-peagent, which has a new --gpgConfigBasepath option to allow you to specify the .gnupg directory in Windows.
-
Tell HN: GitHub no longer supporting unauthenticated `git://`
sshCommand = C:/utils/OpenSSH-Win64/ssh.exe
For GPG, the only things I've done is to use gpg-agent and set up a passthrough for gpg-agent to WSL2 for both OpenSSH and GPG via https://github.com/BlackReloaded/wsl2-ssh-pageant/ since I do development both natively on Windows and via WSL2.
-
SSH Agent Restriction (new in OpenSSH 8.9)
Yeah, I've been using a Yubikey for a bit over a year and I'm already a huge fan of the way it works with SSH/Git. It's a bit more of a pain to set up with WSL2 since you need something like https://github.com/BlackReloaded/wsl2-ssh-pageant but it's absolutely worth the setup time.
-
How to use Windows ssh-agent on a WSL2 distribution to avoid entering SSH key passphrases?
I use PuTTY's pageant and https://github.com/BlackReloaded/wsl2-ssh-pageant to share keys between environments but you still need to enter your passphrase at power-on. Window's ssh-agent looks like a better solution. No need to re-enter the passphrase and no need to keep the private key around.
- YubiKey 5 - Certificates and signing
What are some alternatives?
Win32-OpenSSH - Win32 port of OpenSSH
wsl-ssh-pageant - A Pageant -> TCP bridge for use with WSL, allowing for Pageant to be used as an ssh-ageant within the WSL environment.
openssh-sk-winhello - A helper for OpenSSH to interact with FIDO2 and U2F security keys through native Windows Hello API
sshuttle - Transparent proxy server that works as a poor man's VPN. Forwards over ssh. Doesn't require admin. Works with Linux and MacOS. Supports DNS tunneling.
WSL-Context-Menu-Manager - Manages the context menu for your Linux tools in WSL/WSL2 for Windows.
WinCryptSSHAgent - Using a Yubikey for SSH Authentication on Windows Seamlessly
WSL-DistroLauncher - Sample/reference launcher app for WSL distro Microsoft Store packages.
npiperelay - npiperelay allows you to access Windows named pipes from WSL
webauthn4j - A portable Java library for WebAuthn and Apple App Attest server side verification
YubiKey-Guide - Guide to using YubiKey for GnuPG and SSH
git-credential-manager - Secure, cross-platform Git credential storage with authentication to GitHub, Azure Repos, and other popular Git hosting services.