PuTTY 0.73 - Hackdot

Re:PuTTY 0.73 by alibert on Tuesday October 01, 2019 @01:45PM (#21128338)

I'm been using a pretty "obscure" fork named PuTTY CAC. The big feature added is that you can use it with a SmartCard including a Yubikey.

I know the most popular use of Yubikey + SSH is via OpenPGP but it involves a lot of things which are not working very well on Windows (namely GPG4Win, unstable gpg-connect-agent, etc.).

With this fork, you just need to install the official Yubikey mini driver to have it work with PuTTY CAC. (You will also need Yubikey Manager to configure your key).

Connect your Yubikey, launch PuTTY CAC, look in SSH>Certificate, enable Attempt cert auth, Set CAPI cert (choose your Yubikey cert).

It even works through Windows Remote Desktop.

https://github.com/NoMoreFood/putty-cac

[ Parent | on HN ]

Re:PuTTY 0.73 by boredpenguin on Tuesday October 01, 2019 @02:42PM (#21129078)

When I used Windows, to use an OpenPGP smartcard with SSH I used this smartcard-enabled fork of pageant[0]. According to the page it should also support Yubikeys.

The process was: launch sc-pageant.exe, insert smartcard in reader, and ready to connect with any SSH client with agent support.

However it is not open source and you have to register your key if you don't want to get an annoying popup from time to time (iirc it was 1€, but you could also email the developer if you were using an OpenPGP card).

[0]: https://smartcard-auth.de/download-en.html

[ Parent | on HN ]

Re:PuTTY 0.73 by alibert on Tuesday October 01, 2019 @03:04PM (#21129316)

Wow, it's even better!

But the licensing is meh. 20 euros for one public key hardcoded to the license...

[ Parent | on HN ]

Re:PuTTY 0.73 by denton-scratch on Tuesday October 01, 2019 @01:52PM (#21128452)

I haven't used Putty with a smartcard for a while (about a year); but I certainly didn't have to use a fork. The card was a FSF GnuPG card.

[ Parent | on HN ]

Re:PuTTY 0.73 by alibert on Tuesday October 01, 2019 @02:39PM (#21129041)

I don't know, I'm still have a vanilla PuTTY and I can't make it work with my Yubikey (PIV mode). There is no setting or anything related to SmartCard or PIV.

I'm no expert on this so I may have missed something.

[ Parent | on HN ]

Re:PuTTY 0.73 by denton-scratch on Tuesday October 01, 2019 @03:24PM (#21129514)

Ah. It looks like you have to rely on gpg-agent; gpg-agent understands cards (and PIN-entry). PuTTY knows how to talk to gpg-agent (which simply replaces Pageant).

Except I remember ending up with multiple copies of gpg-agent running, for no obvious reason (which had to be killed before I could start a session - hmm. Maybe I remember finding this solution annoying). I think support for PIN-entry had its own annoyances.

[Note: I haven't tried this at all recently - I just did a quick search to try to refresh my crumbling memory]

[ Parent | on HN ]

Re:PuTTY 0.73 by m-p-3 on Tuesday October 01, 2019 @01:51PM (#21128426)

Thanks, I've been looking into using the former method but that one seems way more reliable.

[ Parent | on HN ]