Bug ID 1204800
Summary openssh Can Not Generate a SSH key using '-t'
Classification openSUSE
Product openSUSE Distribution
Version Leap 15.4
Hardware Other
OS openSUSE Leap 15.4
Status NEW
Severity Major
Priority P5 - None
Component Security
Assignee security-team@suse.de
Reporter landis.reed@yandex.ru
QA Contact qa-bugs@suse.de
Found By ---
Blocker ---

I can Not generate an ssh key for new laptop and github.

# ssh-keygen -t ed25519-sk -C me@my-domain.com (with or without add quoted)
command output:
Generating public/private ed25519-sk key pair.
You may need to touch your authenticator to authorize key generation.
Key enrollment failed: invalid format

I tried, per github instructions, to use alternate formate '-t ecdsa-sk'
Same output.

verified sshd is running:
# ps aux | grep -iE 'sshd'
root       964  0.0  0.0  69312     0 ?        Ss   Oct24   0:00 sshd:
/usr/sbin/sshd -D [listener] 0 of 10-100 startups
landis    6674  0.0  0.0  10244   808 pts/1    S+   12:53   0:00 grep
--color=auto -iE sshd

- and - 
# sudo service sshd status
[sudo] password for root: 
* sshd.service - OpenSSH Daemon
     Loaded: loaded (/usr/lib/systemd/system/sshd.service; enabled; vendor
preset: disabled)
     Active: active (running) since Mon 2022-10-24 18:35:20 CDT; 2 days ago
   Main PID: 964 (sshd)
      Tasks: 1
     CGroup: /system.slice/sshd.service
             `- 964 "sshd: /usr/sbin/sshd -D [listener] 0 of 10-100 startups"

Oct 24 18:35:20 1linux-v5581 systemd[1]: Starting OpenSSH Daemon...
Oct 24 18:35:20 1linux-v5581 sshd-gen-keys-start[933]: Checking for missing
server keys in /e>
Oct 24 18:35:20 1linux-v5581 sshd[964]: Server listening on 0.0.0.0 port 22.
Oct 24 18:35:20 1linux-v5581 sshd[964]: Server listening on :: port 22.
Oct 24 18:35:20 1linux-v5581 systemd[1]: Started OpenSSH Daemon.

I do Not have a 'hardware key' that I know of, unless inside Dell hardware?

I am able, as always to generate a standard rsa key
# ssh-keygen -C me@my-domain.com
and have that accepted by github, 
But... rsa seems to be, being phased out.

So, I'm unable to specify the encryption via '-t'


You are receiving this mail because: