Does not read SSH key from SSH agent

[TKLCZ]

Describe the bug
After some Cyberduck update, my SFTP connections stops work. My SSH key is stored in macOS's system SSH agent. Everything works correctly in other apps like Terminal or Fork Lift.

To Reproduce
Steps to reproduce the behavior:

1. Create SFTP connection in Cyberduck with URL and username only (without password or path to key)
2. Load your SSH key into system SSH agent
3. Try to connect
4. You'll get a "Enter your password" dialog only, connection will not be established

Expected behavior
Connection will be established

Desktop (please complete the following information):

• OS: macOS
• Version 15.5

[kofruge]

I've been having the same problem on macOS 15.6.1. I use an SSH key stored on a Yubikey that's loaded by the system's SSH agent. It works correctly when using SSH from the terminal and in other applications, but I've been stuck on Cyberduck 9.1.3 for a long time now as it's the last version where this seemed to work correctly. I've tried each release since 9.1.3, but so far this bug has persisted across each new update. I really want to update Cyberduck, but I need it to be able to use the SSH key in my Yubikey when connecting to SFTP bookmarks. I see this issue has been open for a couple months now. Any hope for an update or a resolution?

[OMICRON3069]

During the transition from icloud keychain ssh-agent to bitwarden, I probably found the actual cause of this issue.

When using icloud as ssh-agent, cyberduck will try to find and utilize the SSH_AUTH_SOCK by itself, but when using bitwarden, you must explicit set the ssh-agent socket on ~/.ssh/config, which is:

Host *
    AddKeysToAgent yes
    IdentityAgent /Users/<your user name>/Library/Containers/com.bitwarden.desktop/Data/.bitwarden-ssh-agent.sock

With this config being set, now I can use ssh-agent with bitwarden on version 9.2.4 without problem.

you can find more detail about how to set ssh-agent socket on below webpage:
https://bitwarden.com/help/ssh-agent/#tab-macos-6VN1DmoAVFvm7ZWD95curS
https://docs.cyberduck.io/protocols/sftp/

So I think the cause of this problem is just cyberduck has ditch the default ssh-agent socket path of icloud keychain, and you can try to avoid this by setting IdentityAgent in ~/.ssh/config and you may find the socket path by echo $SSH_AUTH_SOCK

[kofruge]

During the transition from icloud keychain ssh-agent to bitwarden, I probably found the actual cause of this issue.

When using icloud as ssh-agent, cyberduck will try to find and utilize the SSH_AUTH_SOCK by itself, but when using bitwarden, you must explicit set the ssh-agent socket on ~/.ssh/config, which is:

Host *
    AddKeysToAgent yes
    IdentityAgent /Users/<your user name>/Library/Containers/com.bitwarden.desktop/Data/.bitwarden-ssh-agent.sock

With this config being set, now I can use ssh-agent with bitwarden on version 9.2.4 without problem.

you can find more detail about how to set ssh-agent socket on below webpage: https://bitwarden.com/help/ssh-agent/#tab-macos-6VN1DmoAVFvm7ZWD95curS https://docs.cyberduck.io/protocols/sftp/

So I think the cause of this problem is just cyberduck has ditch the default ssh-agent socket path of icloud keychain, and you can try to avoid this by setting IdentityAgent in ~/.ssh/config and you may find the socket path by echo $SSH_AUTH_SOCK

Oh man, thank you so much for this info! You're 100% correct! My SSH key is stored on a Yubikey with its OpenPGP implementation and GPGTools for Mac is my SSH agent, so I changed my ~/.ssh/config file to include:

Host *
    IdentityAgent /Users/<username>/.gnupg/S.gpg-agent.ssh

Once I added that, I updated to the latest version of Cyberduck and SFTP connection authentication worked just like in Cyberduck version 9.1.3. Again, thank you so much, @OMICRON3069!

I guess this issue can be closed since it's not really a bug in Cyberduck?

[dkocher]

Documentation can be found in the following tutorials

• Configure Public Key Authentication for SFTP using 1Password SSH Agent
• Configure Public Key Authentication for SFTP using Bitwarden SSH Agent
• Configure Public Key Authentication for SFTP using yubikey-agent

[dkocher]

We have a fix in #17603 to restore the previous support to read the SSH_AUTH_SOCK environment variable.