GNU bug report logs -
#49714
28.0.50; TRAMP burns CPU and has insufficient user reporting when using xxxx-sk SSH keys
Previous Next
Reported by: Dima Kogan <dima <at> secretsauce.net>
Date: Fri, 23 Jul 2021 22:07:02 UTC
Severity: normal
Found in version 28.0.50
Done: Dima Kogan <dima <at> secretsauce.net>
Bug is archived. No further changes may be made.
Full log
View this message in rfc822 format
[Message part 1 (text/plain, inline)]
Your bug report
#49714: 28.0.50; TRAMP burns CPU and has insufficient user reporting when using xxxx-sk SSH keys
which was filed against the emacs package, has been closed.
The explanation is attached below, along with your original report.
If you require more details, please reply to 49714 <at> debbugs.gnu.org.
--
49714: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=49714
GNU Bug Tracking System
Contact help-debbugs <at> gnu.org with problems
[Message part 2 (message/rfc822, inline)]
Hi Michael. Sorry I haven't replied to this. I think the current code is
good, and I'm closing the bug. If anything else pops up in this area, we
can use a new ticket. Thank you very much!
[Message part 3 (message/rfc822, inline)]
Hi.
I have a yubikey, a hardware encryption device. For the purposes of SSH,
the SSH private key is split betweek a file on disk (.ssh/id_ed25519_sk)
and some data on the yubikey. When logging into an SSH server, the
interaction generally looks like this:
client$ ssh ADDRESS
Enter passphrase for key '/home/dima/.ssh/id_ed25519_sk':
[the user enters the passphrase; not echoed to the console]
Confirm user presence for key ED25519-SK XXXXXXXXXXXXXXX
[the user physically touches the yubikey with their finger]
server$
[we are logged-in]
In TRAMP it looks like this:
C-x C-f
/ssh:ADDRESS:
[Emacs asks for the passphrase. This is good]
[Now we have a problem]
Emacs now spins the CPU, saying nothing. Internally, ssh is asking for
the user to touch the yubikey, but TRAMP is not communicating this
information. I know I should touch the yubikey, and if I do that, TRAMP
succeeds. There are two bugs here:
1. Emacs should not be spinning the CPU. This is actually an old bug. I
usually see this with normal SSH connections, but it only happens
during the login sequence, which isn't very long. In THIS case the
login sequence could be longer. In any case, we shouldn't be
spinning.
2. Emacs should relay whatever ssh is saying (i.e. "Confirm user
presence...") to the user
Thanks!
I'm using emacs built from source on 2021-07-16. I'm pretty sure the
This bug report was last modified 3 years and 312 days ago.
Previous Next
GNU bug tracking system
Copyright (C) 1999 Darren O. Benham,
1997,2003 nCipher Corporation Ltd,
1994-97 Ian Jackson.