openssh unix dev - Sep 2010 - ssh-keygen with libpkcs11.so can't work

Hi,

I'm trying the new feature "ssh-keygen(1) now supports signing
certificate
using a CA key that has been stored in a PKCS#11 token".
According to the manpage,  I should use "-D" option.  And I had a
problem
with this option.

root at ubuntu-desktop[/home/adam/temp7]#ssh-keygen -s ca_key.pub -D
libpkcs11.so -I key_id  id_rsa.pub
dlopen libpkcs11.so failed: libpkcs11.so: cannot open shared object file: No
such file or directory
cannot read public key from pkcs11

I searched on my ubuntu server but found no libpkcs11.so.  Also, I searched
online, and didn't find too much help.
Do I need to download the source of pkcs11, then compile and install on my
mahine?  If yes, where could I get the source.
Or I misunderstood the new feature, and it should not be used in this way?

Thanks in advance.

Regards,
Seifer

Le samedi 25 septembre 2010 ? 14:58 +0800, Nan a ?crit :
> I'm trying the new feature "ssh-keygen(1) now supports signing
> certificate
> using a CA key that has been stored in a PKCS#11 token".
> According to the manpage,  I should use "-D" option.  And I had a
> problem
> with this option. 
Please read this HOWTO covering most aspects of PKCS#11 token in
OpenSSH: 

http://www.gooze.eu/howto/using-openssh-with-smartcards

-- 
                  Jean-Michel Pour? - Gooze - http://www.gooze.eu
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 6022 bytes
Desc: not available
URL:
<http://lists.mindrot.org/pipermail/openssh-unix-dev/attachments/20100925/523d8c35/attachment-0001.bin>