search for: manufacturerid

...e openssh 6.4 version on Linux or Mac. Log from ssh -I 0: C_GetFunctionList 2014-01-28 03:26:42.350 Returned: 0 CKR_OK 1: C_Initialize 2014-01-28 03:26:42.351 [in] pInitArgs = (nil) Returned: 0 CKR_OK 2: C_GetInfo 2014-01-28 03:26:42.352 [out] pInfo: cryptokiVersion: 2.20 manufacturerID: 'SafeNet, Inc. ' flags: 0 libraryDescription: 'SafeNet eToken PKCS#11 ' libraryVersion: 8.3 Returned: 0 CKR_OK 3: C_GetSlotList 2014-01-28 03:26:42.352 [in] tokenPresent = 0x1 [out] pSlotList: Co...

...or. ssh -A -I /usr/lib/libeToken.so -p example.net -vvv OpenSSH_7.1p1, OpenSSL 1.0.2d 9 Jul 2015 debug1: Reading configuration data /etc/ssh/ssh_config debug2: ssh_connect: needpriv 0 debug1: Connecting to example.com [0000:1111:2222:3333:4444:5555] port 21. debug1: Connection established. debug1: manufacturerID <SafeNet, Inc.> cryptokiVersion 2.20 libraryDescription <SafeNet eToken PKCS#11> libraryVersion 9.0 debug1: label <eToken> manufacturerID <SafeNet, Inc.> model <eToken> serial <01234567> flags 0x60d debug1: have 1 keys debug1: have 2 keys xmalloc: zero size Outp...

...ONBLOCK debug1: process_message: socket 1 (fd=4) type 20 debug1: process_add_smartcard_key: add /usr/lib/x86_64-linux-gnu/opensc-pkcs11.so debug1: pkcs11_start_helper: starting /usr/local/libexec/ssh-pkcs11-helper -vvv debug1: process_add debug1: provider /usr/lib/x86_64-linux-gnu/opensc-pkcs11.so: manufacturerID <OpenSC Project> cryptokiVersion 2.20 libraryDescription <OpenSC smartcard framework> libraryVersion 0.19 debug1: provider /usr/lib/x86_64-linux-gnu/opensc-pkcs11.so slot 0: label <SSH key> manufacturerID <piv_II> model <PKCS#15 emulate> serial <00000000> flags 0...

Hi there, has anybody managed to get the eToken Pro Anywhere work with SSH? I'm using the latest SafeNetAuthentication drivers available for Ubuntu 64bit (8.3) and everything is working just fine except for ssh. I can use the eToken for logging in, openvpn, rdestkop, etc. but it seems ssh does not recognize the device properly. The command "ssh -I /usr/lib/libeToken.so.8 user at

...CTION debug2: fd 4 setting O_NONBLOCK debug1: process_message: socket 1 (fd=4) type 20 debug2: process_add_smartcard_key: entering debug1: process_add_smartcard_key: add /usr/lib/x86_64-linux-gnu/libp11-kit.so.0.3.0 debug1: process_add debug1: provider /usr/lib/x86_64-linux-gnu/libp11-kit.so.0.3.0: manufacturerID <PKCS#11 Kit> cryptokiVersion 2.40 libraryDescription <PKCS#11 Kit Proxy Module> libraryVersion 1.1 debug1: provider /usr/lib/x86_64-linux-gnu/libp11-kit.so.0.3.0 slot 0: label <YubiKey PIV #19258332> manufacturerID <Yubico (www.yubico.com)> model <YubiKey YK5> serial...

...lib/libmusclepkcs11.so root at jackson OpenSSH_5.4p1, OpenSSL 0.9.8k 25 Mar 2009 debug1: Reading configuration data /etc/ssh/ssh_config debug1: ssh_set_validator: ignore responder url debug1: Connecting to jackson [2001:470:1d:160:224:8cff:fe92:3230] port 22. debug1: Connection established. debug1: manufacturerID <SCHLUMBERGER> cryptokiVersion 2.11 libraryDescription <SLB PKCS #11 module> libraryVersion 1.0 debug1: label <MuscleCard Applet> manufacturerID <Unknown MFR> model <Unknown Model> serial <1> flags 0x40d C_GetAttributeValue failed: 18 debug1: have 1 keys C_GetAtt...

...dm[4066]: gdm_xdmcp_decode: Received opcode REQUEST from client 10.2.1.200 May 14 03:08:24 lts-nimbus gdm[4066]: gdm_xdmcp_handle_request: Got REQUEST from 10.2.1.200 May 14 03:08:24 lts-nimbus gdm[4066]: gdm_xdmcp_handle_request: xdmcp_pending=0, MaxPending=4, xdmcp_sessions=50, MaxSessions=80, ManufacturerID= May 14 03:08:24 lts-nimbus gdm[4066]: gdm_xdmcp_display_dispose_check (200.netbiz.com:0) May 14 03:08:24 lts-nimbus gdm[4066]: gdm_auth_secure_display: Setting up access for 200.netbiz.com:0 May 14 03:08:24 lts-nimbus gdm[4066]: gdm_auth_secure_display: Setting up access May 14 03:08:24 lts-nimb...

Hi list, I have no idea if Damien Miller had the time to work on that. I have an initial patch to authenticate using PKCS#11 and ECDSA keys. This requires OpenSSL 1.0.2, prior OpenSSL versions do not expose the required interfaces to override the signature function pointer for ECDSA. The only limitation is that the OpenSSL API misses some cleanup function (finish, for instance), hence I have yet