Bug 514748 - using remembered ssh-passphrase should open confirmation dialog
Summary: using remembered ssh-passphrase should open confirmation dialog
Status: RESOLVED NOT A BUG
Alias: None
Product: ksshaskpass
Classification: Applications
Component: general (other bugs)
Version First Reported In: 6.5.5
Platform: Arch Linux Linux
: NOR wishlist
Target Milestone: ---
Assignee: Jeremy Whiting
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2026-01-17 17:12 UTC by azrdev
Modified: 2026-01-17 17:29 UTC (History)
0 users

See Also:
Latest Commit:
Version Fixed/Implemented In:
Sentry Crash Report:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description azrdev 2026-01-17 17:12:09 UTC
***
If you're not sure this is actually a bug, instead post about it at https://discuss.kde.org

If you're reporting a crash, attach a backtrace with debug symbols; see https://community.kde.org/Guidelines_and_HOWTOs/Debugging/How_to_create_useful_crash_reports

Please remove this comment after reading and before submitting - thanks!
***

SUMMARY


STEPS TO REPRODUCE
1. configure ssh-agent with ksshaskpass
2. add a key with passphrase to the agent. in the ksshaskpass dialog, enable "remember passphrase" (store in kwallet)
3. use the key (e.g. open an ssh connection utilizing the agent)

OBSERVED RESULT
the passphrase is silently filled in

EXPECTED RESULT
a confirmation (dialog) each time the passphrase is used, especially in the case of agent forwarding.
rationale explained: https://github.com/mritzmann/ssh-askpass

SOFTWARE/OS VERSIONS
KDE Plasma Version: 6.5.5
KDE Frameworks Version: 6.22.0
Qt Version: 6.10.1

ADDITIONAL INFORMATION
gnome-keyring or gcr-ssh-askpass  offer(ed) this functionality, but recently broke for me in archlinux
Comment 1 azrdev 2026-01-17 17:29:10 UTC
I just learned this is part of the ssh-agent protocol (<https://www.ietf.org/archive/id/draft-ietf-sshm-ssh-agent-15.html#name-key-confirmation-constraint>) and ksshaskpass already includes support for it. I just have to add `-c` to the ssh-add invocation loading my key(s) into the agent.