Feature request: implement Windows CAPI usage from PuTTY-CAC

Peter - Wed 11/03/2015 20:06:53 CET +0100

Hi,

I've used putty-sc in the past and switched to PuTTY-CAC some while ago for use of Smartcard with PuTTY (mostly with the pagent). As the PuTTY-CAC maintenance status is somehow unclear and KiTTY is under active development perhaps it is possible to integrate the PuTTY-CAC feature (using Microsoft Windows CAPI for generic access of Smartcard keys).

URLs to since release of 0.64 outdated versions:

PuTTY-CAC 0.62
http://www.risacher.org/putty-cac/

PuTTY-CAC 0.63
https://github.com/jdantzler/PuTTY-CAC-With-Original-Pageant/

Thank you very much!

Josch - Wed 14/10/2015 12:38:48 CEST +0200

putty-cac now has a version 0.65 too
https://github.com/risacher/putty-cac

Cyd - Mon 19/10/2015 13:25:00 CEST +0200

Windows Capi is already available in Kageant.
See download page.

Dri - Thu 04/05/2017 00:13:35 CEST +0200

PuTTY CAC udate to version 0.69 Pre-Release. KiTTY still does not support it. "Windows Capi is already available in Kagante" is not so. The function to "Add Certificate" in Kagante does not work.

MC - Thu 11/05/2017 10:02:30 CEST +0200

Hi,

You don't need any patch at all!
Use a Smart Card enabled pageant, for example this one: http://www.smartcard-auth.de/download-en.html
(Select the "Mike C. version with disabled Secure PIN Entry")
Personally, I use it with several different SCs... and I use the PORTABLE version of KiTTY and Pageant-MC. Working together without any trouble!

Best!

Sommy - Tue 16/05/2017 21:04:57 CEST +0200

Another good Pageant with Smartcard support is:
http://sourceforge.net/projects/puttywincrypt/

This has a great functionality: You can load *any* certificate from a Smartcard recognized by Windows, and if you double-click in the certificate then you copy to the clipboard the "ssh-rsa" public key. Then you can paste it directly to your "authorized_keys" file. Yeah!

manu - Thu 15/06/2017 18:21:49 CEST +0200

Hi,

I feel the KiTTY code needs to be upgraded. Why?

I see in the SVN repository that the Wincrypt patch is included...
http://svn.9bis.com/websvn/listing.php?repname=Sandbox&path=%2Fkitty%2Ftrunk%2Fwincrypt%2F&#a128a33ec21e2c66c67c71d092cf05438

And this is based on this:
http://sourceforge.net/projects/puttywincrypt/?source=typ_redirect

So, if I download the "pageant_wincrypt_068.exe" of the PuTTY-Wincrypt project, and I select "Add Certificate" with the right button, then I can select one certificate in my SMARTCARD. Then it's working right... Great!

However, If I start Portable KiTTY with peagent (KiTTY.exe -runagent), and the I select "Add Certificate" with my card inserted... nothing appears.

Please, can you update your code? I really like to use SMARTCARDS for store certificates. And if the KiTTY project includes it, then please, make it runnable.

Thank you!

Cyd - Thu 15/06/2017 23:04:59 CEST +0200

The new patch was included into this beta build: http://www.9bis.net/kitty/data/beta/kitty.exe
Please test and report.

manu - Fri 16/06/2017 09:39:48 CEST +0200

> The new patch was included into this beta build: http://www.9bis.net/kitty/data/beta/kitty.exe
> Please test and report.

Yes! It works! Perfect!
Thanxs man! ;)

manu - Fri 16/06/2017 09:52:29 CEST +0200

Hi,

I see one difference between "pageant_wincrypt.exe" and "KittY".

With this command-line I can load some certificates from the smartcard (load, not use!):

pageant_wincrypt.exe cert://cn=dsoto-key cert://cn=my-cert2

However using KiTTY with:

KiTTY.exe -runagent cert://cn=dsoto-key cert://cn=my-cert2

It opens the smartcard window for selecting the certificates. Moreover, if you try to load two certificates, the window opens two times.
Please, can you fix this?

Thank you!

Answer

The forum is actually closed