Bug 514748

Summary:	using remembered ssh-passphrase should open confirmation dialog
Product:	[Applications] ksshaskpass	Reporter:	azrdev
Component:	general	Assignee:	Jeremy Whiting <jpwhiting>
Status:	RESOLVED NOT A BUG
Severity:	wishlist
Priority:	NOR
Version First Reported In:	6.5.5
Target Milestone:	---
Platform:	Arch Linux
OS:	Linux
Latest Commit:		Version Fixed/Implemented In:
Sentry Crash Report:

Description azrdev 2026-01-17 17:12:09 UTC

***
If you're not sure this is actually a bug, instead post about it at https://discuss.kde.org

If you're reporting a crash, attach a backtrace with debug symbols; see https://community.kde.org/Guidelines_and_HOWTOs/Debugging/How_to_create_useful_crash_reports

Please remove this comment after reading and before submitting - thanks!
***

SUMMARY


STEPS TO REPRODUCE
1. configure ssh-agent with ksshaskpass
2. add a key with passphrase to the agent. in the ksshaskpass dialog, enable "remember passphrase" (store in kwallet)
3. use the key (e.g. open an ssh connection utilizing the agent)

OBSERVED RESULT
the passphrase is silently filled in

EXPECTED RESULT
a confirmation (dialog) each time the passphrase is used, especially in the case of agent forwarding.
rationale explained: https://github.com/mritzmann/ssh-askpass

SOFTWARE/OS VERSIONS
KDE Plasma Version: 6.5.5
KDE Frameworks Version: 6.22.0
Qt Version: 6.10.1

ADDITIONAL INFORMATION
gnome-keyring or gcr-ssh-askpass  offer(ed) this functionality, but recently broke for me in archlinux

Comment 1 azrdev 2026-01-17 17:29:10 UTC

I just learned this is part of the ssh-agent protocol (<https://www.ietf.org/archive/id/draft-ietf-sshm-ssh-agent-15.html#name-key-confirmation-constraint>) and ksshaskpass already includes support for it. I just have to add `-c` to the ssh-add invocation loading my key(s) into the agent.