MIME-Version: 1.0
Date: Fri, 2 Apr 2010 23:48:57 -0700
Message-ID: <z2wd16ee5ea1004022348ze1e732f3u17670eb70aa27e58@mail.gmail.com>
Subject: Cygwin openssh 5.4p1 & pkcs problems
From: John Cavanaugh <cavanaughwww+open@gmail.com>
To: cygwin@cygwin.com
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com

Regarding one of the emails to the cygwin list


Changes since OpenSSH 5.3
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

Features:

....

=A0* Remove the libsectok/OpenSC-based smartcard code and add support for
=A0 PKCS#11 tokens. This support is automatically enabled on all
=A0 platforms that support dlopen(3) and was inspired by patches written
=A0 by Alon Bar-Lev. Details in the ssh(1) and ssh-add(1) manpages.

....


I dont know if you have tried this, but i was unable to get this to
work with my smartcard. =A0 And I would *love* for it to work.

cavanaug@jc-8730w:~$ ssh-keygen -D ActivClient/acpkcs211.dll
dlopen ActivClient/acpkcs211.dll failed: No such file or directory
cannot read public key from pkcs11
cavanaug@jc-8730w:~$ cd ActivClient/
cavanaug@jc-8730w:~/ActivClient$ ssh-keygen -D acpkcs211.dll
no keys
cannot read public key from pkcs11

Seems like both the dlopen code has issues finding the libraries and
even once found it doesnt seem able to load keys.

=46rom the whatever its worth dept. =A0I have been able to get putty (CAC
custom build) to use this pkcs dll to load my cert from.

FYI. =A0If you dont have hardware, it looks like one vendor is offering
free equipment to open source devs.
http://www.gooze.eu/feitian-pki-free-software-developer-card

--
John Cavanaugh

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple