search for: piv

Hi, I'm interested in extending OpenSSH's PKCS#11 code to support ECDSA keys, but have so far been unable to find anyone who can sell me a smartcard that supports it. They certainly exist - AFAIK it's required by the US PIV standard, but obtaining cards that support it in single digit quantities seems all but impossible. Can anybody on this list help? I'd want 2-6 cards/tokens that support ECDSA in the NIST p256 curve and ideally RSA and DSA too. Cheers, Damien

On Mon, 13 Aug 2018, Blumenthal, Uri - 0553 - MITLL wrote: > Lack of time on the Open Source projects is understandable, and not uncommon. > > However, PKCS11 has been in the codebase practically forever - the ECC > patches that I saw did not alter the API or such. It is especially > non-invasive when digital signature is concerned. > > Considering how long those patches have

...n in, then, when I pulled the card, it flashed the popup window with my certs. Yes, at this time, I'm looking at issues with firefox. So - has anyone else had this problem? mark ################# Not yet had the issue(s) but I do have some questions: 1) is this with the same physical PIV that you have been using "Up until a few weeks ago", that is did you (or the affected person) get a new PIV recently? 1a) does firefox have the certificate authorities loaded which cover the card in question (make sure to trace back to the root CA, there have been changes)? 2) have you t...

Hey everyone. Our network has a PII 350Mhz Windows NT server. It serves as our PDC. It also serves our email, print and file sharing needs. We have plans of totally phasing out this computer. There are two candidates for the replacement of our PDC. One is a PIV 1.7Ghz with 768MB of memory (hostname: Karou). This computer is currently our intranet web server. The other computer is a PIV 2.8Ghz with 512 MB memory (hostname: Misau).There are several services that may be distributed between these computers and we have approximately 100 windows users and 5...

Hi All, We have an old Centos 3.5 file and database server, running on a pIII computer with Intel 820 mother board. It has a software raid 1(mirror) + LVM on two IDE hard disk. I want to upgrade to a newer computer with pIV - 2.4GHz on a Intel D848PMB mother board. Should I expect any problems if I just move the array from the old machine to the new and boot there? Should I do any preparations(I know I must do a full backup), before moving the disks? Best regards! ageorgiev

So, it *seems* to be working, pretty much. I needed to install opensc, openct pcsc-lite, pcsc-lite-openct, and ctapi-common will be installed as a dependency. I *removed* coolkey and esc, which depended on it. 100% of the time, they misidentifed the new/current US federal ID PIV-II cards as coolkey cards, and popped up this "phone home" window, then a "manage smartcards" window. Without them, I also don't see an icon in the taskbar... but using ssh-add (actually, my manager built openssh, opensc and openct from current source, 5.4? 5.5?, and rename...

Hi, folks, Up until a few weeks ago, it worked as it has been for years: firefox, security device is libcoolkey, and pcscd. Today, I go to use it (I have done updates sine I last used it), and try preferences->advanced->certificates, and it hangs. My most recent try was for over 20 min. If you move something over the window, then move it away, it's a blank window. Pull out the

Hi Tony, Have you solved this problem yet?I took another approach and used CACkey which supportsUS Government PIV cards including the CAC.? In my case I set it up on Linux Mint but there is an rpm version of CACKey for 32 or 64 bit Centos.Here is the process I went through. - setup CAC card by following instructions on: https://help.ubuntu.com/community/CommonAccessCard sudo apt-get install libpcsclite1 pcscd...

...AppleUSB20Hub at 14340000/AppleUSB20HubPort at 14343000/YubiKey OTP+FIDO+CCID at 14343000/IOUSBHostInterface at 1/IOUSBHostHIDDevice at 14343000,1 debug1: ssh-sk-helper: reply len 4 debug3: ssh_msg_send: type 5 debug3: reap_helper: pid=96317 No keys to download I tried using ?change-pin? in yubico-piv-tool, but that didn?t seem to make a difference. I still got the same error after successfully changing the PIN. This is a recently purchased YubiKey 5 NFC (within the last month or so), reporting version 5.2.4 in ?yubico-piv-tool -a status?. -- Ron Frederick ronf at timeheart.net

CentOS 7, In firefox -> privacy & security -> certificates -> security devices i am trying to load the pkcs11 modules, but get the error unable to load. I am following the directions at https://piv.idmanagement.gov/engineering/firefox/ I have installed opensc and openssl-pkcs11, which contains /usr/lib64/openssl/engines/pkcs11.so and am using that is the module Has anybody here done that, and can offer advice? Tony Schreiner

[[Sending again, as for some strange reason it is not accepted]] Hello OpenSSH developers, I maintain external patch for PKCS#11 smartcard support into OpenSSH[1] , many users already apply and use this patch. I wish to know if anyone is interesting in working toward merging this into mainline. I had some discussion with Damien Miller, but then he disappeared. Having standard smartcard

predict.lm keeps row names when working from several rows in newdata, but always removes rowname from a single row. The rownames are removed by the line in predict.lm predictor <- drop(X[, piv, drop = FALSE] %*% beta[piv]) What is the reason for that decision? I usually want to retain the row names. tmp <- data.frame(x=1:4, y=c(1,3,2,5)) tmp.lm <- lm(y ~ x, data=tmp) tmp.new <- data.frame(x=5:6, y=8:7) predict(tmp.lm, newdata=tmp.new, interval="confidence")...

...family=binomial(link=logit)); Where the variables are taken from the trainSet of size 1989x31. The test set is sized 222x31. Now my question is when I try to predict on the test set it gives me the error: > predict.glm(model, testSet, type ="response") "Error in drop(X[, piv, drop = FALSE] %*% beta[piv]) : subscript out of bounds" It does fine on trainSet. so it is something about the testSet. On the other hand, I realized that some independent variables say "MaSz" takes 3 different values in the trainset vs. 4 different ones in the testSet. I am...

I set up the YubiKey with OpenSSH 8.2 (Ubuntu client and server) and it works. However, it does not do PIN enforcement at SSH login. It only requests the PIN during the set-up process (when the key is being generated). Is that the way it's supposed to work? Frank

Hi all - I'm stumped by the following mdl <- glm(resp ~ . , data = df, family=binomial, offset = ofst) WORKS yhat <- predict(mdl) WORKS yhat <- predict(mdl,newdata = df) FAILS Error in drop(X[, piv, drop = FALSE] %*% beta[piv]) : subscript out of bounds I've tried without offset, quoting binomial. The offset variable ofst IS in df. Previous postings indicate possible names(df) problems (renaming factor levels?) but I'm using the same data.frame for the newdata option. Thank you...

...cive (or it thinks it recives) yellow alarms at all the B-channels, after that it restart all the channels. When restarting the B-channels it cut all the conversations that is handling at that moment. Does anyone have an idea for what it is happening? We run a asterisk 1.2.1 on a HP Proliant ML310, PIV 3Ghz 2 Mb L2 cache, 1 Gb Ram. We have a TE210P digium card configured for E1. This pbx has been running for almost a moth before giving this problems, we have called our telco and seens that in their side all is ok. (Our telco is ONO- Spain) This is the zaptel.conf span=1,0,0,ccs,hdb3,crc4,yel...

Hi all I want to look at setting up a simple / cheap SAN / NAS server using normal PIV motherboard, 2GB (or even more) RAM, Core 2 Duo CPU (probably a Intel 6700 / 6750 / 6800) & some SATA HDD's (4 or 6x 320GB - 750GB). My budget is limited, so I can't afford a pre-built NAS device. Can this be done with CentOS? I've been looking FreeNAS (which is built on FreeBSD...

...odel.frame if e.g. a `poly' term is used, but doesn't actually seem to hurt the prediction. However, that doesn't fix it all. There is still a bug in `predict', even after replacing `model.frame.default' with the above: test> predict( lm.bug, scrunge.data) Error in drop(X[, piv, drop = FALSE] %*% beta[piv]) : subscript out of bounds test> # wot??? This time, the bug is in `delete.response', which call `terms' to set most of the attributes including `variables', but adjusts the original `predvars' by hand. Because `terms' returns th...

...igium Card (4 E1's) with ISDN protocol and I need to find out if there is any limitation about DSP capabilities, I mean, I am not sure how many phone calls my Digium card supports, simultaneously. The calling flow goes from IAX <-> ISDN. I am running this card into CPU like this: - Micro PIV 3.0 - 1Gbyte Memory Thanks. Levy.- -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.digium.com/pipermail/asterisk-users/attachments/20070324/6d0548fb/attachment.htm

...ubtleties, and the code needs careful checking. Some of the looping is surely not necessary, but it is surely best to begin with the minimum necessary changes. My tests, including checks against S-PLUS, have extended to fitting spline curves. I have not tested the code with any example where the pivot sequence does not run sequentially from 1 to p1. For what it is worth, I am using RW-1.0.0 under Windows 98. df<-data.frame(x=1:9,y=c(2,3,6,4,8,10,12,14,15)) > df.lm_lm(y~x,data=df) > as.vector(predict(df.lm,se=T,type="terms")$se.fit) [1] 0.9904885 0.7428664 0.4952442 0.24762...