search for: pkcs11_init

...rg ReportedBy: alanh at fairlite.co.uk Trying to build 5.8p2 and because the system I'm using lacks dlopen, PKCS11 isn't available and therefore fails with this.... ssh-keygen.c: In function 'do_ca_sign': ssh-keygen.c:1410:2: warning: implicit declaration of function 'pkcs11_init' ssh-keygen.c:1493:2: warning: implicit declaration of function 'pkcs11_terminate' m68k-atari-mint-gcc -o ssh-keygen ssh-keygen.o -L. -Lopenbsd-compat/ -fstack-protector-all -lssh -lopenbsd-compat -lssl -lcrypto -lz -lz -lpthread ssh-keygen.o:ssh-keygen.o:(.text+0x48b2): undefined r...

...one has to check in various files if <sys/socket.h> and/or <netinet/ip.h> are multiply defined, because of "includes.h". edit config.h to #define BROKEN_READV_COMPARISON #undef HAVE_TYPE_IN_UTMP #define DISABLE_UTMPX #undef ENABLE_PKCS11 in ssh-keygen.c remove references to pkcs11_init and pkcs11_terminate on lines 1410 and 1493. to get sshd working one has to either set "UsePrivilegeSeparation no" or "Compression no" in sshd_config. I finally went with "Compression no". I hope this report is helpful for some people, although I am quite sure that...

https://bugzilla.mindrot.org/show_bug.cgi?id=2432 Bug ID: 2432 Summary: ssh-keygen and tools should be able to get public part directly from private key (portability) Product: Portable OpenSSH Version: 6.9p1 Hardware: Other OS: Linux Status: NEW Severity: enhancement

Hi, Is there any way to store HostKey in hardware (and delegate the related processing)? I have been using Roumen Petrov's x509 patch for clients, which works via an OpenSSL engine, but it does not seem to support server HostKey: http://roumenpetrov.info/pipermail/ssh_x509_roumenpetrov.info/2012q4/000019.html For PKCS#11, I have found an email on this list from a year back suggesting this