@@ -23,51 +23,25 @@ At a minimum, you must have the following in order to use this repository:
23
23
24
24
## Install
25
25
26
- This repository has been tested with the following setup:
26
+ You may want to visit [ the
27
+ wiki] ( https://github.com/mgbowen/windows-fido-bridge/wiki/Installing-a-distro-with-OpenSSH-8.3 )
28
+ that details how to get a Linux distro with a version of OpenSSH that's new
29
+ enough to work with windows-fido-bridge.
27
30
28
- * Windows 10 version 2004 (>= build 19041)
29
- * Debian 11 (bullseye) running via [ Windows Subsystem for Linux (WSL)
30
- 2] ( https://docs.microsoft.com/en-us/windows/wsl/wsl2-install )
31
- * One of the following security keys:
32
- * YubiKey 4
33
- * YubiKey NEO
34
- * YubiKey 5 NFC
31
+ ### From apt repository
35
32
36
- Other execution environments or security keys may work, but have not been
37
- explicitly tested.
38
-
39
- ### Install Debian bullseye
40
-
41
- Debian 10, the current release available in the Microsoft Store, does not have a
42
- version of OpenSSH that's new enough to support FIDO keys. To get a version that
43
- is new enough, you need to upgrade your base system to Debian 11 (bullseye).
44
-
45
- To do that, install Debian from the Microsoft Store, then run the following
46
- commands to upgrade your installation to bullseye:
33
+ The recommended method of installing windows-fido-bridge is to use its apt
34
+ repository at [ apt.mgbowen.dev] ( https://apt.mgbowen.dev ) . Go to that link and
35
+ follow its instructions to set up access to the repository for your operating
36
+ system, then run the following:
47
37
48
38
```
49
- sudo mv /etc/apt/sources.list /etc/apt/sources.list.orig
50
- cat << EOF | sudo tee /etc/apt/sources.list > /dev/null
51
- deb http://deb.debian.org/debian bullseye main
52
- deb http://security.debian.org/debian-security bullseye-security main
53
- EOF
54
-
55
- sudo apt update
56
- sudo apt upgrade
57
- sudo apt full-upgrade
58
- sudo apt autoremove --purge
39
+ sudo apt install windows-fido-bridge
59
40
```
60
41
61
- Pulling openssh-client from sid was previously needed, but the package has since
62
- moved directly into bullseye. You can remove the changes you had made with the
63
- following commands:
64
-
65
- ```
66
- sudo rm /etc/apt/sources.list.d/sid.list /etc/apt/preferences.d/{sid,openssh-client}.pref
67
- sudo apt update
68
- ```
42
+ ### From source
69
43
70
- ### Build from source
44
+ You can also build this repository from source:
71
45
72
46
```
73
47
sudo apt install build-essential cmake g++-mingw-w64-x86-64 git
@@ -105,7 +79,7 @@ To do that, you need to tell OpenSSH what middleware library to use. If you used
105
79
the installation instructions above, you can use the following command:
106
80
107
81
```
108
- SSH_SK_PROVIDER=/usr/local/lib/ libwindowsfidobridge.so ssh-keygen -t ecdsa-sk
82
+ SSH_SK_PROVIDER=libwindowsfidobridge.so ssh-keygen -t ecdsa-sk
109
83
```
110
84
111
85
If everything goes well, you should see a Windows dialog pop up asking you to
@@ -115,7 +89,7 @@ to your remote server's `.ssh/authorized_keys` file, you can then authenticate
115
89
using the following command:
116
90
117
91
```
118
- ssh -oSecurityKeyProvider=/usr/local/lib/ libwindowsfidobridge.so remote-server
92
+ ssh -oSecurityKeyProvider=libwindowsfidobridge.so remote-server
119
93
```
120
94
121
95
You should now be logged in to your remote server!
@@ -131,11 +105,11 @@ before calling `ssh-add`. Note that you **must** specify the full path to the
131
105
library when passing it to ` ssh-add ` for ` ssh-agent ` to accept it. For example:
132
106
133
107
```
134
- ssh-add -S /usr/local/ lib/libwindowsfidobridge.so
108
+ ssh-add -S /usr/lib/libwindowsfidobridge.so
135
109
136
110
# or
137
111
138
- SSH_SK_PROVIDER=/usr/local/ lib/libwindowsfidobridge.so ssh-add
112
+ SSH_SK_PROVIDER=/usr/lib/libwindowsfidobridge.so ssh-add
139
113
```
140
114
141
115
You may also completely omit the explicit library specification if you place the
0 commit comments