search for: cka_sign

...= 0x5670001 [in] hObject = 0x3c60002 [in] pTemplate[1]: CKA_DECRYPT 00007fff3bd35a5f / 1 [out] pTemplate[1]: CKA_DECRYPT True Returned: 0 CKR_OK 16: C_GetAttributeValue 2014-01-28 04:00:43.580 [in] hSession = 0x5670001 [in] hObject = 0x3c60002 [in] pTemplate[1]: CKA_SIGN 00007fff3bd35a5f / 1 [out] pTemplate[1]: CKA_SIGN True Returned: 0 CKR_OK 17: C_GetAttributeValue 2014-01-28 04:00:43.580 [in] hSession = 0x5670001 [in] hObject = 0x3c60002 [in] pTemplate[1]: CKA_? (0x80000001) 00007fff3bd35ab7 / 1 [out] pTemplate[1]: C...

https://bugzilla.mindrot.org/show_bug.cgi?id=1736 Summary: OpenSSH doesn't seem to work with my MuscleCard PKCS#11 library Product: Portable OpenSSH Version: 5.4p1 Platform: ix86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: Smartcard AssignedTo:

...ssh-keygen -t v00 ..."). The v00 format, introduced in OpenSSH 5.4, will be supported for at least one year from this release, after which it will be deprecated and removed. BugFixes: * The PKCS#11 code now retries a lookup for a private key if there is no matching key with CKA_SIGN attribute enabled; this fixes fixes MuscleCard support (bz#1736) * Unbreak strdelim() skipping past quoted strings (bz#1757). For example, the following directive was not parsed correctly: AllowUsers "blah blah" blah * sftp(1): fix swapped args in upload_dir_internal...

...generate a v00 certificate). The older format, introduced in OpenSSH 5.4, will be supported for at least one year from this release, after which it will be deprecated and removed. BugFixes: * The PKCS#11 code now retries a lookup for a private key if there's no matching key with CKA_SIGN attribute enabled; this fixes fixes MuscleCard support (bz#1736) * Unbreak strdelim() skipping past quoted strings, e.g. AllowUsers "blah blah" blah was broken (bz#1757) * sftp(1): fix swapped args in upload_dir_internal(), breaking recursive upload depth checks and...

...ssh-keygen -t v00 ..."). The v00 format, introduced in OpenSSH 5.4, will be supported for at least one year from this release, after which it will be deprecated and removed. BugFixes: * The PKCS#11 code now retries a lookup for a private key if there is no matching key with CKA_SIGN attribute enabled; this fixes fixes MuscleCard support (bz#1736) * Unbreak strdelim() skipping past quoted strings (bz#1757). For example, the following directive was not parsed correctly: AllowUsers "blah blah" blah * sftp(1): fix swapped args in upload_dir_internal...

Hi list, I have no idea if Damien Miller had the time to work on that. I have an initial patch to authenticate using PKCS#11 and ECDSA keys. This requires OpenSSL 1.0.2, prior OpenSSL versions do not expose the required interfaces to override the signature function pointer for ECDSA. The only limitation is that the OpenSSL API misses some cleanup function (finish, for instance), hence I have yet