search for: c_getattributevalu

...8 03:26:42.353 [in] hSession = 0x3c60002 [in] pTemplate[1]: CKA_CLASS CKO_PUBLIC_KEY Returned: 0 CKR_OK 8: C_FindObjects 2014-01-28 03:26:42.353 [in] hSession = 0x3c60002 [in] ulMaxObjectCount = 0x1 [out] ulObjectCount = 0x1 Object 0x8690003 matches Returned: 0 CKR_OK 9: C_GetAttributeValue 2014-01-28 03:26:42.353 [in] hSession = 0x3c60002 [in] hObject = 0x8690003 [in] pTemplate[3]: CKA_ID 0000000000000000 / 0 CKA_MODULUS 0000000000000000 / 0 CKA_PUBLIC_EXPONENT 0000000000000000 / 0 [out] pTemplate[3]: CKA_ID 000000000000000...

Hi list, I have no idea if Damien Miller had the time to work on that. I have an initial patch to authenticate using PKCS#11 and ECDSA keys. This requires OpenSSL 1.0.2, prior OpenSSL versions do not expose the required interfaces to override the signature function pointer for ECDSA. The only limitation is that the OpenSSL API misses some cleanup function (finish, for instance), hence I have yet

...se an Aladdin eToken PRO 64k (4.2) USB smart card for public key ssh authentication (using the -I option with the PKCS11 library for the eToken), but OpenSSH would abort with the message: xmalloc: zero size I tracked this down to the pkcs11_fetch_keys function in ssh-pkcs11.c, and discovered that C_GetAttributeValue returns a ulValueLen of 0 for some of the attributes for some of my certificates. I believe that this may be being caused by some CA certificates that I also have on the eToken, which are stored without their private keys. The attached patch (against CVS) resolves this issue by skipping to the n...

...22. debug1: Connection established. debug1: manufacturerID <SCHLUMBERGER> cryptokiVersion 2.11 libraryDescription <SLB PKCS #11 module> libraryVersion 1.0 debug1: label <MuscleCard Applet> manufacturerID <Unknown MFR> model <Unknown Model> serial <1> flags 0x40d C_GetAttributeValue failed: 18 debug1: have 1 keys C_GetAttributeValue failed: 18 debug1: have 2 keys debug1: identity file /home/dbenoy/.ssh/id_rsa type -1 debug1: identity file /home/dbenoy/.ssh/id_rsa-cert type -1 debug1: identity file /home/dbenoy/.ssh/id_dsa type -1 debug1: identity file /home/dbenoy/.ssh/id_dsa...

...ClTRnJweNV5JnHaT89Yrjjmw NQIDAQAB -----END PUBLIC KEY----- This is example from opencryptoki, where it works well with swtoken and I don't see any problem with this approach using yubikey. Also other cards should be able to export public information from private key. This is done using method C_GetAttributeValue with template: CKA_MODULUS, CKA_PUBLIC_EXPONENT The only drawback is that you need unconditionally log in to access these fields, which is usability issue only for ssh-keygen tool -- you are entering pin for ssh-add both ssh when connecting to remote server, but it would be required to preserve s...

https://bugzilla.mindrot.org/show_bug.cgi?id=2474 Bug ID: 2474 Summary: Enabling ECDSA in PKCS#11 support for ssh-agent Product: Portable OpenSSH Version: 7.1p1 Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component: ssh-agent Assignee: unassigned-bugs