Bug 3230

Summary:	Cannot cancel security key user presence check.
Product:	Portable OpenSSH	Reporter:	Jordan Patterson <jordanp>
Component:	ssh-agent	Assignee:	Assigned to nobody <unassigned-bugs>
Status:	NEW ---
Severity:	enhancement	CC:	djm
Priority:	P5
Version:	8.4p1
Hardware:	Other
OS:	Linux

Description Jordan Patterson 2020-11-13 06:35:34 AEDT

I ran ssh to connect to a server, and realized it wasn't the one I wanted.  Clicking cancel in the ssh-askpass dialog closes it, but leaves the ssh command waiting to connect.  In ps, I see the defunct ssh-askpass command and ssh-sk-helper running.

Killing the ssh command still leaves ssh-sk-helper running.  Any new connections using a security key will not get the prompt until I touch the key, which allows the previous ssh-sk-helper instance to finish.  Or I can kill it instead of touching the key.

Would it be possible for the agent to cancel the authentication attempt when the cancel button in the ssh-askpass program is pressed?

Comment 1 Damien Miller 2020-11-13 13:05:12 AEDT

unfortunately, there is no feedback path from the popup back to SSH. Maybe we could add a timeout though to prevent it stalling indefinitely.