Windows install instruction missing
hrump opened this issue · 6 comments
Is Windows this still supported? The referenced .actions/windows directory doesn't appear to be present
There are build scripts under the top /windows directory.
Are there any additional instructions on which scripts to run or what configuration is needed? I'm getting a number of errors about the x64 platform specification not being supported and some COMPILER definitions not being set.
I may be missing something, but the readme mentions consulting https://developers.yubico.com/libfido2/Releases for windows releases, which seems to have downloads for built versions, but I don't know where exactly to put the files. Is it possible to use libfido2 on Windows without building it myself?
edit to clarify: my intended use would be https://www.yubico.com/blog/github-now-supports-ssh-security-keys/ using my yubikey for ssh keys.
@nemchik, you will need a version of ssh built with FIDO2 support, such as the latest release of https://github.com/PowerShell/Win32-OpenSSH/. You can try to follow the instructions at https://upyesp.org/posts/winwdows-ssh-mfa-fido2-yubikey/ (disclaimer: not official Yubico documentation).
@nemchik, you will need a version of ssh built with FIDO2 support, such as the latest release of https://github.com/PowerShell/Win32-OpenSSH/. You can try to follow the instructions at https://upyesp.org/posts/winwdows-ssh-mfa-fido2-yubikey/ (disclaimer: not official Yubico documentation).
Thanks! I found these instructions https://github.com/PowerShell/Win32-OpenSSH/wiki/FIDO---U2F-usage to be very helpful.
In my adventures I ended up running ssh-keygen-O "resident" ... multiple times and it seems my yubikey is now storing multiple key pairs (evident when running ssh-keygen -K, it outputs multiple key pairs to my disk). Is there a way to revoke/remove/delete these (hopefully without resetting the key completely)? I opened support request 381633 via https://support.yubico.com/hc/en-us/requests/new asking this question as well.
Update! I found this article https://www.burgerhout.org/how-to-delete-a-credential-from-an-yubikey/ which details using ykman to delete ssh key pairs from a yubikey, and now I have a nice clean slate to start fresh with all the good things I've learned along the way.