similar to: [Bug 3613] New: Unable to sign using certificates and PKCS#11

Hi all, Thanks for all your hard work! I was particularly excited to see FIDO/U2F support in the latest release. I'd like to make the following bug report in ssh-agent's PKCS#11 support: Steps to reproduce: 1. Configure a smart card (e.g. Yubikey in PIV mode) as an SSH key. 2. Add that key to ssh-agent. 3. Remove that key from ssh-agent. 4. Add that key to ssh-agent. Expected results:

Hello Andreas, On 10/11/05, Andreas Jellinghaus <aj at dungeon.inka.de> wrote: > Peter Koch pointed me to your posting on openssh-devel mailing list. I am very glad that he did. > I'm one of the opensc people, and from my point of view your idea > is a good one. The current openssh-opensc code has a number of issues, > for example the ssh-agent does not test the pin

hi, I testing around with Kolab with LDAP and have some strange problems, with the auto generated packages for Wheezy. On my first test VM, I have 2:2.2.16~rc1-1~auto+4 installed, and everything works as expected. On a new VM I have 2.2.16-1~auto+13_amd64.deb packages and if I include LDAP backend, I get a segmentation fault on /usr/lib/dovecot/auth: root at kolab:/etc/dovecot/conf.d#

https://bugzilla.mindrot.org/show_bug.cgi?id=3635 Bug ID: 3635 Summary: ssh-add -s always asks for PKCS#11 PIN Product: Portable OpenSSH Version: 9.0p1 Hardware: Other OS: Linux Status: NEW Severity: enhancement Priority: P5 Component: ssh-add Assignee: unassigned-bugs at

hello list centos. I installed the packages libp11 and engine_pkcs11 of fedora core 14 on my centos 5.5 to allow me to compile the latest version of bind. this is the only way I found to compile bind 9.7.3. you know another way to compile bind 9.7.3 on centos 5.5 thanks for all your return -- gpg --keyserver pgp.mit.edu --recv-key 092164A7

Hello, PKCS#11 is a standard API interface that can be used in order to access cryptographic tokens. You can find the specification at http://www.rsasecurity.com/rsalabs/node.asp?id=2133, most smartcard and other cryptographic device vendors support PKCS#11, opensc also provides PKCS#11 interface. I can easily make the scard.c, scard-opensc.c and ssh-agent.c support PKCS#11. PKCS#11 is

On 27/03/15 20:46, Peter Serbe wrote: > Dear Samba fellows, > > I try to install samba on my notebook in order to get it into > my samba based domain. It was a bit picky to get everything > assembled on the notebook - but that last issue is hard. :-( > > I installed it from the sources on Debian Jessie - exactly > in the same manner I used for my servers. I got sssd and

https://bugzilla.mindrot.org/show_bug.cgi?id=1773 Summary: PKCS#11 authentication fails with "xmalloc: zero size" for some certificates. Product: Portable OpenSSH Version: 5.5p1 Platform: All OS/Version: All Status: NEW Severity: normal Priority: P2 Component: Smartcard

Hi list, I have no idea if Damien Miller had the time to work on that. I have an initial patch to authenticate using PKCS#11 and ECDSA keys. This requires OpenSSL 1.0.2, prior OpenSSL versions do not expose the required interfaces to override the signature function pointer for ECDSA. The only limitation is that the OpenSSL API misses some cleanup function (finish, for instance), hence I have yet

https://bugzilla.mindrot.org/show_bug.cgi?id=2808 Bug ID: 2808 Summary: Unable to add certificates to agent when using PKCS#11 backed keys. Product: Portable OpenSSH Version: 7.4p1 Hardware: amd64 OS: Linux Status: NEW Severity: enhancement Priority: P5 Component:

https://bugzilla.mindrot.org/show_bug.cgi?id=3628 Bug ID: 3628 Summary: tracking bug for openssh-9.6 Product: Portable OpenSSH Version: -current Hardware: Other OS: Linux Status: NEW Keywords: meta Severity: enhancement Priority: P5 Component: Miscellaneous Assignee:

On Thu, 26 Oct 2017, James Bottomley wrote: > Engine keys are keys whose file format is understood by a specific > engine rather than by openssl itself. Since these keys are file > based, the pkcs11 interface isn't appropriate for them because they > don't actually represent tokens. What sort of keys do you have in mind here that can't be represented via PKCS#11? -d

https://bugzilla.mindrot.org/show_bug.cgi?id=2635 Bug ID: 2635 Summary: Unable to use SSH Agent and user level PKCS11Provider configuration directive Product: Portable OpenSSH Version: 7.3p1 Hardware: Other OS: Linux Status: NEW Severity: normal Priority: P5

Hi, I'm running debian - upgraded fully to potato at the start of the freeze and added latest libgnome-dev before configuring. I tried compiling with gnome support with /usr/local/R/R-0.99.0/configure --with-gnome and got the following output: checking for gnome-config... /usr/bin/gnome-config checking if /usr/bin/gnome-config works... yes checking for orbit-config...

Dear all, I have a question about the plotting of the dynamical orbit by using rgl. My code is as follows: open3d() par3d(cex=2) bg3d("white") for(i in 1:out.length){ ind<-which plot3d(x[1:i],y[1:i],out[,"z"][1:i],xlim=c(-10,10),ylim=c(-10,10),zlim=c(-10,10),col="red",cex=2) Sys.sleep(0.0001) } ,where x,y,out[,"z"] are the position of the object in

Currently I only have one machine backing up to another. I am backing up to a filesystem that is mounted as nosuid. The syncing process works perfectly except it fails on files that are suid. Example proc/ root/ tmp/ mknod tmp/mysql.sock : Invalid argument mknod tmp/orbit-daud/orb-12573780511489051058 : Invalid argument mknod tmp/orbit-daud/orb-139425434385535813 : Invalid argument mknod

https://bugzilla.mindrot.org/show_bug.cgi?id=1773 --- Comment #6 from Sergey Ivanov <evasive.gyron at gmail.com> --- Error is exactly as described by original author. ssh -A -I /usr/lib/libeToken.so -p example.net -vvv OpenSSH_7.1p1, OpenSSL 1.0.2d 9 Jul 2015 debug1: Reading configuration data /etc/ssh/ssh_config debug2: ssh_connect: needpriv 0 debug1: Connecting to example.com

Hi, Here the packages related to xen installed on my system : ii grub-xen-bin 2.02~beta2-22 amd64 GRand Unified Bootloader, version 2 (Xen binaries) ii grub-xen-host 2.02~beta2-22 amd64 GRand Unified Bootloader, version 2 (Xen host version) ii libptexenc1 2014.20140926.35254-6 amd64 TeX Live: pTeX encoding

On Nov 14, 2012, at 10:52 AM, Sean Silva <chisophugis at gmail.com> wrote: > It references release 2.7... is this document worth keeping? > Nuke it from orbit. :) > CC'ing Jim Grosbach since IIRC he recently pulled out some stuff > related to llvm-gcc. > > -- Sean Silva

On 10/5/2020 12:16 PM, Rowland penny via samba wrote: > On 05/10/2020 17:01, Jason Keltz via samba wrote: >> On 10/5/2020 11:58 AM, Rowland penny via samba wrote: >> >>> On 05/10/2020 16:30, Jason Keltz via samba wrote: >>>> Hi. >>>> >>>> Using MIT5 backend with Samba.. >>> I hope you mean on the clients, the use of MIT as the