similar to: [Bug 2240] New: Secure PIN entry for smartcards through the keypad on the reader (patch)

Some smartcard readers have keypad to enter the PIN securely (i.e. such that it cannot be intercepted by a rogue (ssh) binary. PKCS#11 allows for enforcing this in hardware. Below patch allows for SSH to make use of this; against head/master as of today. Dw. commit 7f0250a8ae6c639a19d4e1e24fc112d5e2e1249a Author: Dirk-Willem van Gulik <dirkx at webweaving.org> Date: Tue Mar 17

https://bugzilla.mindrot.org/show_bug.cgi?id=2185 Bug ID: 2185 Summary: Allow entering the PIN via reader pinpad Product: Portable OpenSSH Version: 6.4p1 Hardware: All OS: Linux Status: NEW Severity: enhancement Priority: P5 Component: Smartcard Assignee: unassigned-bugs at

https://bugzilla.mindrot.org/show_bug.cgi?id=2817 Bug ID: 2817 Summary: Add support for PKCS#11 URIs (RFC 7512) Product: Portable OpenSSH Version: 7.6p1 Hardware: Other OS: Linux Status: NEW Severity: enhancement Priority: P5 Component: Smartcard Assignee: unassigned-bugs at

I have a Tripp Lite SMART1500 RMXL2U UPS and I'd love to be able to access it via USB. I found that the latest NUT sources in CVS has a driver that looks like it might work. Any chance that driver would work the my UPS? I tried running it and it's not working: failed to detach kernel driver from USB device... trying again to claim USB device... failed to claim USB device, trying 1

Folks, Find below a minor patch to allow the use of smartcards in readers that have their own PIN entry keypads (Secure PIN entry) such as the SPR332 and most german/medical chipcard devices. Tested on Solaris, FreeBSD and MacOSX against various cards and drivers. I?ve left the pkcs11_interactive check in place. Arguably - with some Secure PIN readers it may be better to move this just in front

Repost; updated for HEAD and tested on ubuntu as well. Dw. Folks, Find below a minor patch to allow the use of smartcards in readers that have their own PIN entry keypads (Secure PIN entry) such as the SPR332 and most german/medical chipcard devices. Tested on Solaris, FreeBSD, Linux and MacOSX against various cards and drivers. I?ve left the pkcs11_interactive check in place. Arguably - with

Hi list, I have no idea if Damien Miller had the time to work on that. I have an initial patch to authenticate using PKCS#11 and ECDSA keys. This requires OpenSSL 1.0.2, prior OpenSSL versions do not expose the required interfaces to override the signature function pointer for ECDSA. The only limitation is that the OpenSSL API misses some cleanup function (finish, for instance), hence I have yet

hello *, im new to the list (and R in general), i have a problem that im hoping someone can help me solve. i have data that i want to turn into a time series per day, ex. 2010-03-01 9 2010-03-03 17 2010-03-04 2 2010-03-05 9 2010-03-07 3 is there an easy way to fill in the gaps for the missing days? thx much --joe

How about using the existing OpenSSH client's PKCS#11 support to isolate keying material in a dedicated process? A similar approach, "Practical key privilege separation using Caml Crush", was discussed at FOSDEM'15 with a focus on Heatbleed [1][2] but the ideas and principles are the same. Now this is easily done using the following available components: - SoftHSM to store

Thomas Calderon <calderon.thomas at gmail.com> writes: > Hi, > > There is no need to add new mechanism identifiers to use specific curves. > > This can be done already using the CKM_ECDSA mechanism parameters (see > CKA_ECDSA_PARAMS > in the standard). > Given that the underlying HW or SW tokens supports Ed25519 curves, then you > could leverage it even with

On 27/05/15 11.07, Dirk-Willem van Gulik wrote: > As a practical suggestion - we ran for a while with a hack where we abuse the version human readable string with a > base64 string of a _salted_ hash of the server we where trying to get to. > > Sharing both salt and hash. > > This let the server figure out the right key to present without too much ado; but without leaking all

---------- Forwarded message --------- From: Adan Calderon <adancalderon at gmail.com> Date: Wed, Mar 13, 2019 at 9:13 AM Subject: Re: [syslinux] syslinux-6.03 failed to boot ESXI 6.7 To: luckydog xf <luckydogxf at gmail.com> I can share some working examples for a USB Thumb drive and PXE servers using chain loading, but it will take me some time. If you are interested in my

I upgraded the version of WINE on my RH7.2 system to wine-20011106-1.i386.rpm now any time I run the wine command I get the following: $ wine -v wine: error while loading shared libraries: libntdll.so: cannot open shared object file: No such file or directory That file is definitely there and readable: $ ls -l /usr/lib/wine/libntdll.so -rwxr-xr-x 1 root root 1175402 Nov 5 23:54

Hi there, im having a problem with the Ajax.Updater, im using the Ajax.Updater to get an divider, inside the div i have a javascript node that i use to do javascript stuff, the problem is when i get the divider i get whole the html but not the javascript node, thats a bug? *anybody know what''s happening?* -- // // Ing. Francisco J. Calderón S. //

So when you boot from only your hard drive attached, it is the primary and only drive. It loads the master boot record that load the NT Loader boot code that is then configured to load the operating system from the primary partition on the primary drive. When you boot from the USB drive, you make it the Primary drive. You then tell it to load the MBR fromt the secondary drive. The secondary

hello *, im running into two major bottlenecks an R script. 1. going through a 40mb file and reading in via readLines() 1 line at a time is almost an order of magnitude slow than the equivalent in python, im wondering if there are alternatives to readLines(), doing more lines at a time helps a bit 2. generating date sequences takes a long time, im basically doing something like

Hello there people, im having a problem with the Ajax.Updater evalscripts, i fill and div with a form that i get with the Ajax.Updater, that form had a javascript validation, i put evalScripts true but when i get the form i had an unexpected close in the firefox, i had a long time looking the answer but nothing yet, somebody with the same problem? or the answer? greets -- // // Ing. Francisco

hello there, im having a little problem with Internet Exploiter, im doing this: //// CODE //// var m = $(''XYZ'').cloneNode(false) m.setAttribute(''id'', ''XYZ_2''); m.value = ''''; var onblur = "alert(''hola'');"; m.setAttribute(''onblur'', onblur);

Lu Wei, What Hard drive are you also trying to boot? The first and only fixed drive inside a computer? If so would the line to boot a local HD not be: LABEL LOCAL MENU LABEL Local operating system in harddrive (if available) kernel chain.c32 append hd0 -Adan On Thu, Apr 4, 2019 at 8:56 AM Adan Calderon <adancalderon at gmail.com> wrote: > > Lu Wei, > > For the DOS portion

On 7/23/2023 12:32 PM, Dirk-Willem van Gulik wrote: >> On 22 Jul 2023, at 23:40, asterisk at phreaknet.org wrote: >> >> I'm assuming you mean at the device level, and that you want to send >> only the relevant header to each device? >> Use pre-dial handlers; a unique handler runs on each destination >> channel. With PJSIP, you're forced to do this