openssh bugs - Dec 2017 - [Bug 2808] New: Unable to add certificates to agent when using PKCS#11 backed keys.

https://bugzilla.mindrot.org/show_bug.cgi?id=2808

            Bug ID: 2808
           Summary: Unable to add certificates to agent when using PKCS#11
                    backed keys.
           Product: Portable OpenSSH
           Version: 7.4p1
          Hardware: amd64
                OS: Linux
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: ssh-agent
          Assignee: unassigned-bugs at mindrot.org
          Reporter: peter at pean.org

I use a combination of Yubikeys and OpenSSH certificates to
authenticate in my environment. But when I want to use my ssh-agent to
bring my keys and certificates with me I have some problems. I cant
find a way to actually add the certificate to the agent when my keys
are stored on a PKCS#11 device.

-- 
You are receiving this mail because:
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2808

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED
                 CC|                            |djm at mindrot.org

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2808

--- Comment #1 from Peter <peter at pean.org> ---
This seems to be handeled by this ticket:
https://bugzilla.mindrot.org/show_bug.cgi?id=2472

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2808

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Keywords|                            |pkcs11

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2808

--- Comment #2 from Damien Miller <djm at mindrot.org> ---
BTW You can use certificates in ssh already using keys stored in an
agent or token. Certificates are grafted to external keys at
authentication time if they are available.

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.

https://bugzilla.mindrot.org/show_bug.cgi?id=2808

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|ASSIGNED                    |RESOLVED
         Resolution|---                         |DUPLICATE

--- Comment #3 from Damien Miller <djm at mindrot.org> ---


*** This bug has been marked as a duplicate of bug 3613 ***

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.