# Pritunl zero SSH for windows?

**URL:** <https://forum.pritunl.com/t/pritunl-zero-ssh-for-windows/107>\
**Category:** Pritunl Zero\
**Created:** [May 2, 2022, 5:22pm UTC](https://forum.pritunl.com/t/pritunl-zero-ssh-for-windows/107 "2022-05-02T17:22:51Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![rkalia](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/r/da6949/32.png) [@rkalia](https://forum.pritunl.com/u/rkalia)\
**Post date:** [May 2, 2022, 5:22pm UTC](https://forum.pritunl.com/t/pritunl-zero-ssh-for-windows/107/1 "2022-05-02T17:22:51Z")

</div>

The Pritunl Zero SSH client is available on Linux and macOS.  
Do pritunl SSH is available for windows?

---

<div class="post-metadata">

**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\
**Post date:** [May 4, 2022, 3:03am UTC](https://forum.pritunl.com/t/pritunl-zero-ssh-for-windows/107/2 "2022-05-04T03:03:33Z")

</div>

The Pritunl SSH client is a small Python script available in the [**Pritunl Zero Client repository**](https://github.com/pritunl/pritunl-zero-client/blob/master/ssh_client.py). It can be run on Windows if Python is installed but it will likely require Cygwin to use the Linux SSH client and `~/.ssh` configuration directory.

It is recommended to use WSL and install the client on the WSL distribution with the package manager.

---

<div class="post-metadata">

**Author:** ![rkalia](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/r/da6949/32.png) [@rkalia](https://forum.pritunl.com/u/rkalia)\
**Post date:** [May 4, 2022, 3:31am UTC](https://forum.pritunl.com/t/pritunl-zero-ssh-for-windows/107/3 "2022-05-04T03:31:27Z")

</div>

thanks I tried the above suggestions but I am getting time out

C:\Users\KaliaR\Downloads\pritunl-zero-client-master\pritunl-zero-client-master\>ssh 10.100.5.4 -v  
OpenSSH\_for\_Windows\_8.1p1, LibreSSL 3.0.2  
debug1: Reading configuration data C:\Users\KaliaR/.ssh/config  
debug1: Connecting to 10.100.5.4 [10.100.5.4] port 22.  
debug1: connect to address 10.100.5.4 port 22: Connection timed out  
ssh: connect to host 10.100.5.4 port 22: Connection timed out

---

<div class="post-metadata">

**Author:** ![rkalia](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/r/da6949/32.png) [@rkalia](https://forum.pritunl.com/u/rkalia)\
**Post date:** [May 4, 2022, 3:35am UTC](https://forum.pritunl.com/t/pritunl-zero-ssh-for-windows/107/4 "2022-05-04T03:35:24Z")

</div>

And I am getting time out on Linux machine as well . Not sure what i am missing — ec2-user@ip-172-31-19-234 ~]$ ssh-keygen -t ed25519  
Generating public/private ed25519 key pair.  
Enter file in which to save the key (/home/ec2-user/.ssh/id\_ed25519):  
Enter passphrase (empty for no passphrase):  
Enter same passphrase again:  
Your identification has been saved in /home/ec2-user/.ssh/id\_ed25519.  
Your public key has been saved in /home/ec2-user/.ssh/id\_ed25519.pub.  
The key fingerprint is:  
SHA256:KTLqzkxIgoFlri+waZEt9UeOa3KlmknirtjXaEguihc ec2-user@ip-172-31-19-234.ec2  
The key’s randomart image is:  
±-[ED25519 256]–+  
| o |  
|.+ |  
|o … . |  
|.o+ . + . |  
|== .oo.+S |  
|+=E. o=. |  
|==+= B |  
|_B_ @ . |  
|O\*\*\* |  
±—[SHA256]-----+  
[ec2-user@ip-172-31-19-234 ~]$ pritunl-ssh  
Enter Pritunl Zero user hostname: zero-user.pritunl.ztpoc.ssc-spc.gc.ca  
SERVER: [https://zero-user.pritunl.ztpoc.ssc-spc.gc.ca](https://zero-user.pritunl.ztpoc.ssc-spc.gc.ca)  
Select SSH key or device:  
[1] id\_ed25519.pub  
Enter number or full path to key: 1  
SSH\_KEY: ~/.ssh/id\_ed25519.pub  
OPEN: [https://zero-user.pritunl.ztpoc.ssc-spc.gc.ca/ssh?ssh-token=sSU5MyymDVuuQa](https://zero-user.pritunl.ztpoc.ssc-spc.gc.ca/ssh?ssh-token=sSU5MyymDVuuQa)  
Couldn’t get a file descriptor referring to the console  
CERTIFICATE: ~/.ssh/id\_ed25519-cert.pub  
Successfully validated SSH key  
[ec2-user@ip-172-31-19-234 ~]$ ssh 10.100.8.4  
^C  
[ec2-user@ip-172-31-19-234 ~]$ ssh 10.100.8.4 -v  
OpenSSH\_8.0p1, OpenSSL 1.1.1k FIPS 25 Mar 2021  
debug1: Reading configuration data /etc/ssh/ssh\_config  
debug1: Reading configuration data /etc/ssh/ssh\_config.d/05-redhat.conf  
debug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config  
debug1: configuration requests final Match pass  
debug1: re-parsing configuration  
debug1: Reading configuration data /etc/ssh/ssh\_config  
debug1: Reading configuration data /etc/ssh/ssh\_config.d/05-redhat.conf  
debug1: Reading configuration data /etc/crypto-policies/back-ends/openssh.config  
debug1: Connecting to 10.100.8.4 [10.100.8.4] port 22.

---

<div class="post-metadata">

**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\
**Post date:** [May 4, 2022, 6:32pm UTC](https://forum.pritunl.com/t/pritunl-zero-ssh-for-windows/107/5 "2022-05-04T18:32:10Z")

</div>

This appears to be an issue with the networking connection to the server not the authentication with the SSH keys. The local IP of the server will need to be accessible to the client. Either a VPN or bastion host will need to be configured. If the bastion host configuration is used the SSH server IP or domain must be included in the matches in the authority configuration. Running `cat .ssh/config` should show a `Host domain.*` match expression with a `ProxyJump`.

---

<div class="post-metadata">

**Author:** ![rkalia](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/r/da6949/32.png) [@rkalia](https://forum.pritunl.com/u/rkalia)\
**Post date:** [May 4, 2022, 8:40pm UTC](https://forum.pritunl.com/t/pritunl-zero-ssh-for-windows/107/6 "2022-05-04T20:40:39Z")

</div>

I do see it is reaching pritunl. But timing out. Do I need to put the backend IP in the machines of configuration Authority?

ID  
6272e11bac331385df1b04a5  
Timestamp  
Wed 4 May 2022, 1:24:59 PM  
Fields  
ssh\_key: ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAILR4sV1U6fonLgWkFNqd6R33P4ECLHAv2hJLLZVDIk3m pwgsc-tpsgc-em\muradiaa@SSC194289

---

<div class="post-metadata">

**Author:** ![rkalia](https://forum.pritunl.com/letter_avatar_proxy/v4/letter/r/da6949/32.png) [@rkalia](https://forum.pritunl.com/u/rkalia)\
**Post date:** [May 4, 2022, 9:02pm UTC](https://forum.pritunl.com/t/pritunl-zero-ssh-for-windows/107/7 "2022-05-04T21:02:15Z")

</div>

the use case i am trying to do is below. use ssh pritunl to connect to internal linux server using ssh ( the internal ssh server is not exposed to anyone) . Please help in understanding if Pritunl offer this? Bastian host or VPN is a different use case that I will try after this. Thanks

---

<div class="post-metadata">

**Author:** ![zach](https://forum.pritunl.com/user_avatar/forum.pritunl.com/zach/32/1105_2.png) [@zach](https://forum.pritunl.com/u/zach)\
**Post date:** [May 6, 2022, 9:03pm UTC](https://forum.pritunl.com/t/pritunl-zero-ssh-for-windows/107/8 "2022-05-06T21:03:43Z")

</div>

The SSH authority will only provide certificate authentication to SSH servers. Either a VPN or bastion host will need to be used to provide connectivity.
