[GH-ISSUE #8] [feature request] add auth to server by public key as alternative to user/pass #3

Closed
opened 2026-10-13 20:10:38 +00:00 by bsakaguchi · 7 comments
Owner

Originally created by @lgg on GitHub (Mar 12, 2021).
Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/8

I want to use Amnezia on VPS with other hosted services and for security reasons i have enabled only pubkey auth on SSH. I wish Amnezia to have support for pubkey auth on SSH as alternative to Password auth.

Originally created by @lgg on GitHub (Mar 12, 2021). Original GitHub issue: https://github.com/amnezia-vpn/amnezia-client/issues/8 I want to use Amnezia on VPS with other hosted services and for security reasons i have enabled only pubkey auth on SSH. I wish Amnezia to have support for pubkey auth on SSH as alternative to Password auth.
Author
Owner

@pokamest commented on GitHub (Mar 14, 2021):

WIP, almost done
Test build already here - https://github.com/amnezia-vpn/desktop-client/releases/download/1.5/AmneziaVPN_for_free_oracle.exe

<!-- gh-comment-id:798879531 --> @pokamest commented on GitHub (Mar 14, 2021): WIP, almost done Test build already here - https://github.com/amnezia-vpn/desktop-client/releases/download/1.5/AmneziaVPN_for_free_oracle.exe
Author
Owner

@pokamest commented on GitHub (Mar 16, 2021):

1.5.1 Released with ssh key auth support (Windows only)
https://github.com/amnezia-vpn/desktop-client/releases/download/1.5/AmneziaVPN_1.5.1.exe

<!-- gh-comment-id:800442944 --> @pokamest commented on GitHub (Mar 16, 2021): 1.5.1 Released with ssh key auth support (Windows only) https://github.com/amnezia-vpn/desktop-client/releases/download/1.5/AmneziaVPN_1.5.1.exe
Author
Owner

@bessgeor commented on GitHub (Apr 2, 2021):

Just downloaded Amnezia VPN from the amnezia.org and tried to authenticate via key pair. As a result I'm getting the following error:
image

I could authenticate using the same credentials by using WSL, the difference is that ssh command requests private key password and amnezia vpn does not.

<!-- gh-comment-id:812385916 --> @bessgeor commented on GitHub (Apr 2, 2021): Just downloaded Amnezia VPN from the amnezia.org and tried to authenticate via key pair. As a result I'm getting the following error: ![image](https://user-images.githubusercontent.com/2414765/113392107-44e5ee00-939d-11eb-9d9f-ee8deb9e418c.png) I could authenticate using the same credentials by using WSL, the difference is that ssh command requests private key password and amnezia vpn does not.
Author
Owner

@Straven commented on GitHub (Apr 10, 2021):

Amnezia can't connect not with private key neither with public. But all ssh-clients and tool succesfully authenticated. Fix problem pls. Password auth is not good.

<!-- gh-comment-id:817210390 --> @Straven commented on GitHub (Apr 10, 2021): Amnezia can't connect not with private key neither with public. But all ssh-clients and tool succesfully authenticated. Fix problem pls. Password auth is not good.
Author
Owner

@pokamest commented on GitHub (Apr 10, 2021):

Private keys encrypted with password is not supported.
If you are experiencing problems with authentication via keys try to convert your keys into PEM format using ssh-keygen utility.
ssh-keygen -p -P "" -N "" -m pem -f path_you_private_key
Do backup of your private key or convert a copy - ssh-keygen will replace file.

Please provide more information about your private key - what is key format you using? I need to know just header of your key - like "-----BEGIN RSA PRIVATE KEY-----". Don't send whole key.

<!-- gh-comment-id:817214550 --> @pokamest commented on GitHub (Apr 10, 2021): Private keys encrypted with password is not supported. If you are experiencing problems with authentication via keys try to convert your keys into PEM format using ssh-keygen utility. `ssh-keygen -p -P "" -N "" -m pem -f path_you_private_key` Do backup of your private key or convert a copy - ssh-keygen will replace file. Please provide more information about your private key - what is key format you using? I need to know just header of your key - like "-----BEGIN RSA PRIVATE KEY-----". Don't send whole key.
Author
Owner

@Straven commented on GitHub (Apr 11, 2021):

yeah. my mistake was i not add header to input field. with header all works fine

<!-- gh-comment-id:817292613 --> @Straven commented on GitHub (Apr 11, 2021): yeah. my mistake was i not add header to input field. with header all works fine
Author
Owner

@pokamest commented on GitHub (May 19, 2021):

Issue fixed since 1.5.3

<!-- gh-comment-id:844085647 --> @pokamest commented on GitHub (May 19, 2021): Issue fixed since 1.5.3
Sign in to join this conversation.
No labels
pull-request
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
amnezia-vpn/amnezia-client#3
No description provided.