Implement ssh-agent Protocol

Hey @aleks please refer to @Quexten’s message above.

I’m a bit disappointed in this thread. This has been open for 5 years with mostly workarounds and when a community member starts developing the feature it gets squashed because a partially associated feature is on the roadmap.
There’s a lot more to this than just an ssh key item type - the powerful thing is the ability to generate ssh keypairs within bitwarden and then leverage them through a built-in ssh-agent. Essentially, the ability to have the key NEVER exist outside the vault.
I can see a design where bitwarden introduces custom types AND a client plugin system similar to keepass where the plugin creates the item type it requires and implements additional functionality. Unfortunately, this would require implementing an entire run-time plugin capability in addition to the custom item types and probably has a whole list of security and cross-platform compatibility concerns as well.

6 Likes

@bw-admin, since @Quexten has put their work on hold because you asked them to, can we get an update from you on the Product Team’s progress?

4 Likes

Meanwhile I wrote some scripts to use Bitwarden CLI with TouchID on macOS to ssh into servers until there is a official solution.
Feel free to use, modify or enhance to your needs:

This should also work on Linux (minus the TouchID part), but I haven’t tested it.

Duplicates:

duplicate: Creating SSH Key in Secrets

i was wrong, not a dupe

1 Like

Hi, my request is not duplicated because my request is only about the possibility to save SSH keys within Secret Manager secrets.

2 Likes

I do use Kleoprata to manage my keys on Windows. I would love to see something similar for Bitwarden, where i do have an ssh-/gpg-agent and can manage my keys in an GUI.

2 Likes

Any progress on this? Im almost tempted to partially going back to KeePass until there is a nice solution.

While it’s not an official Bitwarden solution, my Bitwarden-compatible client SSH Login & Git Commit Signing · quexten/goldwarden Wiki · GitHub supports serving an SSH agent. The ssh keys are stored as Bitwarden secure notes with custom fields.
You just have to configure some environment variables (same as with 1Password, I don’t know for Keepass) and then ssh and git ssh signing will use the key from your Bitwarden vault.

On Linux, there is a CLI client, and I’m getting close to releasing a graphical client on FlatHub. There are Windows and Mac builds too, but they are not as feature complete, albeit the SSH agent part should work.

For the official clients, there are no custom types, and thus there is also no good way for the desktop client to support serving an SSH agent.

4 Likes

Is this feature on the roadmap? So many people ask for this. Other password managers get to manage this. Would be great if they can focus more on this topic.

3 Likes

It’s not on the roadmap. However, if you want to track progress towards support, the most likely path forward can be followed here (with all related pr’s linked in the first comment)

5 Likes

I wrote an e-mail to Bitwarden support why this highly requested feature is not on the roadmap. I will keep you updated.

As @Quexten already mentioned, thx for the effort :slight_smile:

Bitwarden Support:
There is some work currently in progress to add SSH as a new item type (saving/importing/exporting SSH keys) with: #10360

While i cant confirm the ETA this should be available in the product in a future update.

Yep. SSH items and ssh-agent are fairly far in the implementation, but this project is not something that was planned for but sprung from an experiment, hence it is not on the roadmap. The SSH-agent PR is here: [PM-10098] SSH Agent & SSH Key Generator for Bitwarden Desktop by quexten · Pull Request #10293 · bitwarden/clients · GitHub (and already works on Mac, Linux and even Windows).

4 Likes