No SSH public key authentication using smartcard and jumphost (Linux) #20934

Open
opened 2026-01-31 07:28:16 +00:00 by claunia · 0 comments
Owner

Originally created by @cmonty14 on GitHub (Dec 1, 2023).

Windows Terminal version

1.18.2822.0

Windows build number

11.0.22621.2715

Other Software

Gpg4win 4.2.0

Steps to reproduce

I connect a Nitrokey security-token (that is comparable to Yubikey) with OpenPGP keys to my client.
And I want to use this Nitrokey for SSH login to remote servers.

For this I installed GPG4Win on my client and configured file gpg-agent.conf:

enable-ssh-support
To Enable support for PuTTY
enable-putty-support
To Enable support for the native Microsoft OpenSSH binaries (requires gpg 2.4.0 / Gpg4win 4.1.0 or higher)
enable-win32-openssh-support
use-standard-socket
default-cache-ttl 600
max-cache-ttl 7200

Then I (re-) start the gpg-agent and try to SSH into the Jumphost using command ssh (in Windows PowerShell profile).
Here I get a popup window where I must enter the PIN previously set on Nitrokey.
After this I'm connected to the jumphost shell (Linux).

Now I want to connect to the target server using command ssh .

I think this fails because SSH agent forwarding is not working.

Expected Behavior

Public key authentication for SSH connection to any target server from jumphost.

Actual Behavior

I need to enter (user) password requested by target server.

Originally created by @cmonty14 on GitHub (Dec 1, 2023). ### Windows Terminal version 1.18.2822.0 ### Windows build number 11.0.22621.2715 ### Other Software Gpg4win 4.2.0 ### Steps to reproduce I connect a Nitrokey security-token (that is comparable to Yubikey) with OpenPGP keys to my client. And I want to use this Nitrokey for SSH login to remote servers. For this I installed GPG4Win on my client and configured file gpg-agent.conf: ``` enable-ssh-support To Enable support for PuTTY enable-putty-support To Enable support for the native Microsoft OpenSSH binaries (requires gpg 2.4.0 / Gpg4win 4.1.0 or higher) enable-win32-openssh-support use-standard-socket default-cache-ttl 600 max-cache-ttl 7200 ``` Then I (re-) start the gpg-agent and try to SSH into the Jumphost using command ssh <fqdn-jumphost> (in Windows PowerShell profile). Here I get a popup window where I must enter the PIN previously set on Nitrokey. After this I'm connected to the jumphost shell (Linux). Now I want to connect to the target server using command ssh <fqdn-server>. I think this fails because SSH agent forwarding is not working. ### Expected Behavior Public key authentication for SSH connection to any target server from jumphost. ### Actual Behavior I need to enter (user) password requested by target server.
claunia added the Needs-TriageIssue-BugResolution-External labels 2026-01-31 07:28:16 +00:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/terminal#20934