[GH-ISSUE #456] Accepting sk-ssh-ed25519@openssh.com for ingress key #117

New issue

Closed

opened 2026-05-07 00:19:07 +02:00 by BreizhHardware · 1 comment

BreizhHardware commented

2026-05-07 00:19:07 +02:00

Owner

Originally created by @perrze on GitHub (Mar 20, 2024).
Original GitHub issue: https://github.com/ovh/the-bastion/issues/456

Hi,
Some of the bastion users in my group are using sk-ssh-ed25519@openssh.com (ed25519 key protected by an hardware security key like yubikey).
These keys are not accepted by the bastion.
I wonder if it would be possible or compliant with how bastion works to accept these keys as ingress keys for users ?

Originally created by @perrze on GitHub (Mar 20, 2024). Original GitHub issue: https://github.com/ovh/the-bastion/issues/456 Hi, Some of the bastion users in my group are using sk-ssh-ed25519@openssh.com (ed25519 key protected by an hardware security key like yubikey). These keys are not accepted by the bastion. I wonder if it would be possible or compliant with how bastion works to accept these keys as ingress keys for users ?

BreizhHardware closed this issue

2026-05-07 00:19:07 +02:00

BreizhHardware commented

2026-05-07 00:19:08 +02:00

Author

Owner

@speed47 commented on GitHub (Mar 20, 2024):

Hello,

Yes, a contributor started the effort here https://github.com/ovh/the-bastion/pull/420 , currently at OVHcloud we use Yubikeys but usually we use the PIV slot (9a) or the GPG applet (which supports SSH through gpg-agent), however I'm looking into also supporting Webauthn for SSH, which is the sk- series of keytypes as seen by OpenSSH.

I'll look into it in the following days :)

@speed47 commented on GitHub (Mar 20, 2024): Hello, Yes, a contributor started the effort here https://github.com/ovh/the-bastion/pull/420 , currently at OVHcloud we use Yubikeys but usually we use the PIV slot (9a) or the GPG applet (which supports SSH through gpg-agent), however I'm looking into also supporting Webauthn for SSH, which is the sk- series of keytypes as seen by OpenSSH. I'll look into it in the following days :)

BreizhHardware referenced this issue

2026-05-07 00:20:00 +02:00

[PR #117] [MERGED] bump to v3.01.99-rc1 #251