[Bug 2635] Unable to use SSH Agent and user level PKCS11Provider configuration directive

bugzilla-daemon at bugzilla.mindrot.org bugzilla-daemon at bugzilla.mindrot.org
Sat Sep 23 04:33:01 AEST 2017


https://bugzilla.mindrot.org/show_bug.cgi?id=2635

--- Comment #7 from Marc 'Zugschlus' Haber <mh+openssh-bugzilla at zugschlus.de> ---
And, after trying with PKCS11Provider option in place, and the agent
refusing operation for the first time, I need to do the ssh-add -D
ssh-add -e, ssh-add -s routine, or the agent will refuse operation even
after removing the PKCS11Provider option:

ssh -F config-with-PKSCS11Provider 
=> agent refused operation
ssh -F config-without-PKCS11Provider
=> agent refused operation
ssh-add -D
ssh-add -e
ssh-add -s
ssh -F config-without-PKCS11Provider
=> works

Whenever ssh says "agent refused operations", ssh-agent started with -d
logs "process_sign_request2: sshkey_sign: error in libcrypto".

Hope this helps.

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list