search for: etoken

Hi, I am not sure if this the right place for the question. Sorry if not ... My System: SuSE 9.2 OpenSSH 3.9p1 I have trouble to use a Smartcard with openssh. If i try to connect directly to the Smartcard, it fails: ssh -I 0:45 localhost card-etoken.c:175:etoken_check_sw: required access right not granted card-etoken.c:631:do_compute_signature: returning with: Security status not satisfied card-etoken.c:175:etoken_check_sw: required access right not granted card-etoken.c:631:do_compute_signature: returning with: Security status not satisfi...

Hi there, has anybody managed to get the eToken Pro Anywhere work with SSH? I'm using the latest SafeNetAuthentication drivers available for Ubuntu 64bit (8.3) and everything is working just fine except for ssh. I can use the eToken for logging in, openvpn, rdestkop, etc. but it seems ssh does not recognize the device properly. The command &...

...-01-28 03:26:42.351 [in] pInitArgs = (nil) Returned: 0 CKR_OK 2: C_GetInfo 2014-01-28 03:26:42.352 [out] pInfo: cryptokiVersion: 2.20 manufacturerID: 'SafeNet, Inc. ' flags: 0 libraryDescription: 'SafeNet eToken PKCS#11 ' libraryVersion: 8.3 Returned: 0 CKR_OK 3: C_GetSlotList 2014-01-28 03:26:42.352 [in] tokenPresent = 0x1 [out] pSlotList: Count is 1 [out] *pulCount = 0x1 Returned: 0 CKR_OK 4: C_GetSlotList 2014-01-28 03:26:42.352 [in] tokenPresent = 0x1 [out] pSlotList:...

Dear List, I need to make an Aladdin eToken Pro visible in a Linux guest HVM, but I cannot assign the device to any domU, while it''s being blocked by the dom0. To avoid this trouble I would like to pass the whole USB bus to the domU directly, via PCI passthrough. Now I use xen 3.3.0 from xensource and xen kernel from Ubuntu...

https://bugzilla.mindrot.org/show_bug.cgi?id=1773 --- Comment #6 from Sergey Ivanov <evasive.gyron at gmail.com> --- Error is exactly as described by original author. ssh -A -I /usr/lib/libeToken.so -p example.net -vvv OpenSSH_7.1p1, OpenSSL 1.0.2d 9 Jul 2015 debug1: Reading configuration data /etc/ssh/ssh_config debug2: ssh_connect: needpriv 0 debug1: Connecting to example.com [0000:1111:2222:3333:4444:5555] port 21. debug1: Connection established. debug1: manufacturerID <SafeNet, Inc.&...

...onent: Smartcard AssignedTo: unassigned-bugs at mindrot.org ReportedBy: mdrtbugzilla at codefive.co.uk Created attachment 1851 --> https://bugzilla.mindrot.org/attachment.cgi?id=1851 Patch to fix xmalloc error when using pkcs11 for auth I've been trying to use an Aladdin eToken PRO 64k (4.2) USB smart card for public key ssh authentication (using the -I option with the PKCS11 library for the eToken), but OpenSSH would abort with the message: xmalloc: zero size I tracked this down to the pkcs11_fetch_keys function in ssh-pkcs11.c, and discovered that C_GetAttributeValue...

...issue, but more SIP in general Because security in general, and specifically identification becomes more and more a subject for more concern, and Asterisk is capable of doing sip/TLS, i was wondering what more could be done to improve security. Specially softphones, might it be possible to employ etokens or smartcards for holding the certificates needed by TLS? Done before? Curious, Hans

Hello OpenSSH developers, A week ago I've posted a patch that enables openssh to work with PKCS#11 tokens. I didn't receive any comments regarding the patch or reply to my questions. In current software world, providing a security product that does not support standard interface for external cryptographic hardware makes the product obsolete. Please comment my patch, so I can know

...re ================== The following card operating systems are supported at the moment (where read-only means that personalized cards can be used, but OpenSC does not provide personalization support for these). - Gemplus GPK cards (except Gemsafe) - Schlumberger Cryptoflex - CardOS/M4 (Aladdin eToken PRO, etc) - Starcos SPK (read-only) - Micardo (read-only) - MioCOS (read-only) - Setcos (read-only) - TCOS (read-only) Note that Java cards are not supported at the moment. Download ======== Source code is available from http://www.opensc.org/ A binary package for Windows is available as...

anyone know anything about using openssl 0.9.7b in EL4 w/ pkcs#11 supported smartcard/etokens? I need to figure out how to set this up so a webclient application can use token based certificate with a https connection to the tomcat xmlrpc server with a minimum of fuss. the actual client app is in python but will be using m2Crypto which in turn uses openssl. i CAn find lots on login w...

does anyone know if any repositories have OpenSC built for EL4 ? I've been struggling with building this myself, trying to get an Aladdin eToken working with OpenSSL so we can use it for client authentication of an SSL session.

https://bugzilla.mindrot.org/show_bug.cgi?id=1736 Summary: OpenSSH doesn't seem to work with my MuscleCard PKCS#11 library Product: Portable OpenSSH Version: 5.4p1 Platform: ix86 OS/Version: Linux Status: NEW Severity: normal Priority: P2 Component: Smartcard AssignedTo:

...tically using best checksumming function xc [ 1.450107] NET: Registered protocol family 16 [ 1.450143] audit: initializing netlink subsys (disabled) [ 1.450207] audit: type=2000 audit(1581414814.421:1): state=initialized audit_enabled=0 res=1 [ 1.450331] Spectre V2 mitigation: etokens [ 1.451141] random: fast init done [ 1.480154] HugeTLB registered 1.00 MiB page size, pre-allocated 0 pages [ 1.722111] raid6: vx128x8 gen() 23433 MB/s [ 1.892050] raid6: vx128x8 xor() 13777 MB/s [ 1.892052] raid6: using algorithm vx128x8 gen() 23433 MB/s [ 1.892053] raid6: ......

On Fri, Feb 07, 2020 at 08:47:14AM +0100, Christian Borntraeger wrote: > Also adding Cornelia. > > > On 06.02.20 23:17, Michael S. Tsirkin wrote: > > On Thu, Feb 06, 2020 at 04:12:21PM +0100, Christian Borntraeger wrote: > >> > >> > >> On 06.02.20 15:22, eperezma at redhat.com wrote: > >>> Hi Christian. > >>> > >>>

On Fri, Feb 07, 2020 at 08:47:14AM +0100, Christian Borntraeger wrote: > Also adding Cornelia. > > > On 06.02.20 23:17, Michael S. Tsirkin wrote: > > On Thu, Feb 06, 2020 at 04:12:21PM +0100, Christian Borntraeger wrote: > >> > >> > >> On 06.02.20 15:22, eperezma at redhat.com wrote: > >>> Hi Christian. > >>> > >>>