4 ms·
It's usually not a full replacement. SSH for macOS has some integration built in that current OpenSSH does not have, like Keychain integration.
by 2ion 7y ago
It's usually not a full replacement. SSH for macOS has some integration built in that current OpenSSH does not have, like Keychain integration.
- skoskie 7y agoReally? I have my ~/.ssh/config file set to “AddToKeychain” on all entries and it doesn’t seem to be a problem.
- lilyball 7y agoI thought Homebrew patched OpensSSH using Apple's keychain patch, but looking at the formula right now I see # Please don't resubmit the keychain patch option. It will never be accepted. # https://github.com/Homebrew/homebrew-dupes/pull/482#issuecomment-118994372 Sadly the homebrew-dupes repo seems to have been deleted so this comment can't be read anymore.
- saagarjha 7y ago> Sadly the homebrew-dupes repo seems to have been deleted so this comment can't be read anymore. They're kinda bad at that in general :/
- CKN23-ARIN 7y agoArchive of the discussion: https://archive.is/hSB6d https://archive.is/hSB6d > We are uncomfortable continually supporting a 1900+ line patch which upstream hasn't signed off on that has the potential to both compromise OpenSSH security and Keychain security. From 10.11 it will also be impossible to edit plists in /System/* without disabling rootless, which isn't a configuration we'll be intentionally supporting.
- _-___________-_ 7y agoI prefer ssh-agent anyway, but yeah, I think they did remove the keychain integration patch.