[Bug 2427] New: ssh keygen is trying to read uninitialized slots on smart card (and is failing)

[bugzilla-daemon at mindrot.org]

https://bugzilla.mindrot.org/show_bug.cgi?id=2427

            Bug ID: 2427
           Summary: ssh keygen is trying to read uninitialized slots on
                    smart card (and is failing)
           Product: Portable OpenSSH
           Version: 6.9p1
          Hardware: Other
                OS: Linux
            Status: NEW
          Severity: enhancement
          Priority: P5
         Component: Smartcard
          Assignee: unassigned-bugs at mindrot.org
          Reporter: jjelen at redhat.com

Created attachment 2664
  --> https://bugzilla.mindrot.org/attachment.cgi?id=2664&action=edit
ignore uninitialized slots

Based on our investigation of Smart Cart usability with openSSH we
found several minor problems that were filled in our red hat bugzilla
[1]. One of them is that keygen is trying to open session on
uninitialised slots on smart card (tested with softHSM soft token).

First view was that the problem is on soft token side, but it announces
the slot in correct way, with CKF_TOKEN_INITIALIZED flag, which should
prevent tools to open session on this slot.

I created patch against master that is skipping slots with this flag,
rather than failing hard on OpenSession.

Minimal reproducer is available in referenced bugzilla. To see whole
output that is available as an attachment, swap the last line with:
$ export PKCS11SPY=/usr/lib64/pkcs11/libsofthsm2.so
$ ssh-keygen -vvvD /usr/lib64/pkcs11/pkcs11-spy.so

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1241874

-- 
You are receiving this mail because:
You are watching the assignee of the bug.