3 ms·

This is pretty cool, and having notifications when the agent is used is really a good security bonus. So I'm pretty sad that I can't have this (requires Apple b

This is pretty cool, and having notifications when the agent is used is really a good security bonus. So I'm pretty sad that I can't have this (requires Apple binary) AND a decently recent version of OpenSSH: $ /usr/local/bin/ssh -V OpenSSH_6.6p1, OpenSSL 1.0.1g 7 Apr 2014 $ /usr/bin/ssh -V OpenSSH_6.2p2, OSSLShim 0.9.8r 8 Dec 2011 BUT, please think twice, thrice before installing a ssh-agent binary compiled by a stranger. You're hiring that binary to really hold your keys. You have to be really sure you can trust it.

zobzu 12y ago
you can also patch and compile https://github.com/devinteske/apple/commit/296d954851dbba2384797620c1b9a77e562917b8 https://github.com/devinteske/apple/commit/296d954851dbba238... Or if you're on linux https://github.com/gdestuynder/openssh-portable/commit/bb0e988bb3a1113592fe13b949ad79075ed5e90d https://github.com/gdestuynder/openssh-portable/commit/bb0e9... Or if you use gnupg https://github.com/gdestuynder/gnupg-agent-notification/commit/57697146188d52f5447a50303070371a8cf5c0bb https://github.com/gdestuynder/gnupg-agent-notification/comm... Or if you use Windows and Putty https://github.com/gdestuynder/putty-pagent-notification https://github.com/gdestuynder/putty-pagent-notification (binary https://github.com/gdestuynder/putty-pagent-notification/releases/tag/1.0 https://github.com/gdestuynder/putty-pagent-notification/rel...) that's all i found
dteske 12y ago
The source code can be compiled by cloning https://github.com/devinteske/apple https://github.com/devinteske/apple and then: cd OpenSSH-186/openssh ./configure --with-pam --with-audit=bsm make You can see from my commits at the following URL what I had to change to add support for Notification Center. https://github.com/devinteske/apple/tree/master/OpenSSH-186/openssh https://github.com/devinteske/apple/tree/master/OpenSSH-186/... Namely I changed the following: openssh/Makefile.in openssh/ssh-agent.c openssh/ssh-agent-notify.m [new] openssh/ssh-agent-notify.h [new] As for the OpenSSH version, Apple forks OpenSSH and then adds things like Keychain and launchd(8) support. So if you want a later version while retaining those features, you'll have to get Apple's customizations applied to a later non-Apple version or wait until Apple does it themselves. Migrating my changes into a non-Apple version simply to say you have the latest version of OpenSSH would mean that you lose keychain and launchd(8) integration. -- Devin
- FiloSottile 12y ago
  I understand this, I was just stating that 1. people should compile their own binary, since there is no easy way to know if you actually made only those edits in the provided binary (don't take it personally, really) 2. it's sad that Apple forked OpenSSH, since I can't have their integrations with a recent version
Yoshino 12y ago
Homebrew's openssh formula include a patch for Keychain support: $ brew info openssh openssh: stable 6.6p1 ... ==> Options --with-keychain-support Add native OS X Keychain and Launch Daemon support to ssh-agent --with-ldns Build with lens support Perhaps you could add the notification patch to Homebrew's openssh and get the best of both worlds?

zobzu 12y ago

you can also patch and compile https://github.com/devinteske/apple/commit/296d954851dbba2384797620c1b9a77e562917b8 https://github.com/devinteske/apple/commit/296d954851dbba238... Or if you're on linux https://github.com/gdestuynder/openssh-portable/commit/bb0e988bb3a1113592fe13b949ad79075ed5e90d https://github.com/gdestuynder/openssh-portable/commit/bb0e9... Or if you use gnupg https://github.com/gdestuynder/gnupg-agent-notification/commit/57697146188d52f5447a50303070371a8cf5c0bb https://github.com/gdestuynder/gnupg-agent-notification/comm... Or if you use Windows and Putty https://github.com/gdestuynder/putty-pagent-notification https://github.com/gdestuynder/putty-pagent-notification (binary https://github.com/gdestuynder/putty-pagent-notification/releases/tag/1.0 https://github.com/gdestuynder/putty-pagent-notification/rel...) that's all i found

dteske 12y ago

The source code can be compiled by cloning https://github.com/devinteske/apple https://github.com/devinteske/apple and then: cd OpenSSH-186/openssh ./configure --with-pam --with-audit=bsm make You can see from my commits at the following URL what I had to change to add support for Notification Center. https://github.com/devinteske/apple/tree/master/OpenSSH-186/openssh https://github.com/devinteske/apple/tree/master/OpenSSH-186/... Namely I changed the following: openssh/Makefile.in openssh/ssh-agent.c openssh/ssh-agent-notify.m [new] openssh/ssh-agent-notify.h [new] As for the OpenSSH version, Apple forks OpenSSH and then adds things like Keychain and launchd(8) support. So if you want a later version while retaining those features, you'll have to get Apple's customizations applied to a later non-Apple version or wait until Apple does it themselves. Migrating my changes into a non-Apple version simply to say you have the latest version of OpenSSH would mean that you lose keychain and launchd(8) integration. -- Devin

FiloSottile 12y ago
I understand this, I was just stating that 1. people should compile their own binary, since there is no easy way to know if you actually made only those edits in the provided binary (don't take it personally, really) 2. it's sad that Apple forked OpenSSH, since I can't have their integrations with a recent version

Yoshino 12y ago

Homebrew's openssh formula include a patch for Keychain support: $ brew info openssh openssh: stable 6.6p1 ... ==> Options --with-keychain-support Add native OS X Keychain and Launch Daemon support to ssh-agent --with-ldns Build with lens support Perhaps you could add the notification patch to Homebrew's openssh and get the best of both worlds?