Cygwin openssh 5.4p1 & pkcs problems

[John Cavanaugh]

Regarding one of the emails to the cygwin list


Changes since OpenSSH 5.3
=========================

Features:

....

 * Remove the libsectok/OpenSC-based smartcard code and add support for
  PKCS#11 tokens. This support is automatically enabled on all
  platforms that support dlopen(3) and was inspired by patches written
  by Alon Bar-Lev. Details in the ssh(1) and ssh-add(1) manpages.

....


I dont know if you have tried this, but i was unable to get this to
work with my smartcard.   And I would *love* for it to work.

cavanaug@jc-8730w:~$ ssh-keygen -D ActivClient/acpkcs211.dll
dlopen ActivClient/acpkcs211.dll failed: No such file or directory
cannot read public key from pkcs11
cavanaug@jc-8730w:~$ cd ActivClient/
cavanaug@jc-8730w:~/ActivClient$ ssh-keygen -D acpkcs211.dll
no keys
cannot read public key from pkcs11

Seems like both the dlopen code has issues finding the libraries and
even once found it doesnt seem able to load keys.

From the whatever its worth dept.  I have been able to get putty (CAC
custom build) to use this pkcs dll to load my cert from.

FYI.  If you dont have hardware, it looks like one vendor is offering
free equipment to open source devs.
http://www.gooze.eu/feitian-pki-free-software-developer-card

--
John Cavanaugh

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple