Displaying 8 results from an estimated 8 matches for "libcoolkeypk11".
2016 Jul 26
4
CentOS 6.7->6.8, ssh-add issue, followup, more info
...bject: Re: [CentOS] CentOS 6.7->6.8, ssh-add issue, followup, more info
>
> m.roth at 5-cent.us wrote:
> > Folks,
> >
> > I am perplexed. I updated my workstation at work Wed before I left,
> > from 6.7 to 6.8. Then, yesterday, I went to use ssh-add -s
> > libcoolkeypk11.so, which I've done many times before to add the certs
> > from my PIV card... and 100% of the time if fails, letting me
> > SSH_AGENT_FAILURE, cannot add card.
> >
> > Now, using a script called sccr, which uses my public and private key
> > to generate a one-t...
2016 Jul 22
2
CentOS 6.7->6.8, ssh-add issue
Folks,
I am perplexed. I updated my workstation at work Wed before I left,
from 6.7 to 6.8. Then, yesterday, I went to use ssh-add -s
libcoolkeypk11.so, which I've done many times before to add the certs
from my PIV card... and 100% of the time if fails, letting me
SSH_AGENT_FAILURE, cannot add card.
Now, using a script called sccr, which uses my public and private key
to generate a one-time password (we use the to sudo to root), works...
2016 Jul 22
0
CentOS 6.7->6.8, ssh-add issue, followup, more info
m.roth at 5-cent.us wrote:
> Folks,
>
> I am perplexed. I updated my workstation at work Wed before I left,
> from 6.7 to 6.8. Then, yesterday, I went to use ssh-add -s
> libcoolkeypk11.so, which I've done many times before to add the certs
> from my PIV card... and 100% of the time if fails, letting me
> SSH_AGENT_FAILURE, cannot add card.
>
> Now, using a script called sccr, which uses my public and private key
> to generate a one-time password (we use the...
2014 Dec 03
5
Firefox fails to authenticate .mil sites with New DoD CAC
...---------------
1. NSS Internal PKCS #11 Module
slots: 2 slots attached
status: loaded
slot: NSS Internal Cryptographic Services
token: NSS Generic Crypto Services
slot: NSS User Private Key and Certificate Services
token: NSS Certificate DB
2. CoolKey PKCS #11 Module
library name: libcoolkeypk11.so
slots: 1 slot attached
status: loaded
slot: SCM Microsystems Inc. SCR3310 USB Smart Card Reader (21120628202
token: WEBSTER.CALVIN.DALE.9427154028
3. cackey
library name: libcackey.so
slots: 2 slots attached
status: loaded
slot: CACKey Slot
token: WEBSTER.CALVIN.DALE.9427154028...
2016 Jul 28
0
CentOS 6.7->6.8, ssh-add issue, followup, more info
...see which component had the bad change. And then figure out what those changes were. I've done it before to help RH get CAC with ssh going again in 6.x series (6.[34] IIRC, broke something).
Remember the software stack is IIRC:
firefox
nss
coolkey
pcscd
ccid
I think your use of openssh -s libcoolkeypk11.so makes it look like:
ssh
coolkey
pcscd
ccid
and for your sccr script probably looks a bit like:
sccr
?nss??openssl?
coolkey
pcscd
ccid
I would likely** yum downgrade ccid pcscd coolkey and then see if the lock still happened between sccr and firefox, then kick nss (or do douwngrade in the o...
2014 Dec 04
0
Firefox fails to authenticate .mil sites with New DoD CAC
...ded
> >
> > slot: NSS Internal Cryptographic Services
> > token: NSS Generic Crypto Services
> >
> > slot: NSS User Private Key and Certificate Services
> > token: NSS Certificate DB
> >
> > 2. CoolKey PKCS #11 Module
> > library name: libcoolkeypk11.so
> > slots: 1 slot attached
> > status: loaded
> >
> > slot: SCM Microsystems Inc. SCR3310 USB Smart Card Reader (21120628202
> > token: WEBSTER.CALVIN.DALE.9427154028
> >
> > 3. cackey
> > library name: libcackey.so
> > slots: 2 s...
2014 Dec 04
0
Firefox fails to authenticate .mil sites with New DoD CAC
...status: loaded
>
> slot: NSS Internal Cryptographic Services
> token: NSS Generic Crypto Services
>
> slot: NSS User Private Key and Certificate Services
> token: NSS Certificate DB
>
> 2. CoolKey PKCS #11 Module
> library name: libcoolkeypk11.so
> slots: 1 slot attached
> status: loaded
>
> slot: SCM Microsystems Inc. SCR3310 USB Smart Card Reader (21120628202
> token: WEBSTER.CALVIN.DALE.9427154028
>
> 3. cackey
> library name: libcackey.so
> slots: 2 slots...
2014 Dec 03
0
Firefox fails to authenticate .mil sites with New DoD CAC
...slots: 2 slots attached
> status: loaded
>
> slot: NSS Internal Cryptographic Services
> token: NSS Generic Crypto Services
>
> slot: NSS User Private Key and Certificate Services
> token: NSS Certificate DB
>
> 2. CoolKey PKCS #11 Module
> library name: libcoolkeypk11.so
> slots: 1 slot attached
> status: loaded
>
> slot: SCM Microsystems Inc. SCR3310 USB Smart Card
> Reader (21120628202
> token: WEBSTER.CALVIN.DALE.9427154028
>
> 3. cackey
> library name: libcackey.so
> slots: 2 slots attached
> status: loaded
>...