FIDO SSH support (ed25519-sk, ecdsa-sk)

0

I have a ed25519-sk ssh key that I would like to add as an SSH key for AWS CodeCommit. Pasting the key into the upload form yields the error message Invalid public key uploaded. I assume this is because it is a format that's only existed for a few years. OpenSSH has supported FIDO ssh keys since https://www.openssh.com/txt/release-8.2. Verbose logging of an ssh connection to git-codecommit.us-east-1.amazonaws.com:22 shows it as an acceptable host key algorithm:

host key algorithms: rsa-sha2-512-cert-v01@openssh.com,rsa-sha2-256-cert-v01@openssh.com,rsa-sha2-512,rsa-sha2-256,ssh-ed25519-cert-v01@openssh.com,ecdsa-sha2-nistp256-cert-v01@openssh.com,ecdsa-sha2-nistp384-cert-v01@openssh.com,ecdsa-sha2-nistp521-cert-v01@openssh.com,sk-ssh-ed25519-cert-v01@openssh.com,sk-ecdsa-sha2-nistp256-cert-v01@openssh.com,ssh-ed25519,ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,sk-ssh-ed25519@openssh.com,sk-ecdsa-sha2-nistp256@openssh.com

Could CodeCommit be updated to accept this key type? Or does it already and I'm doing something wrong?

sean
asked a year ago85 views
No Answers

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions