[Bug 3879] ssh: pkcs11 key enumeration fails with "pin required"

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Tue Oct 14 17:39:04 AEDT 2025


https://bugzilla.mindrot.org/show_bug.cgi?id=3879

--- Comment #8 from jan.nordholz at mail.de ---
No,

I assume the "Enter PIN for '<CARD>':" prompt I'm using is coming from
ssh-pkcs11.c:pksc11_login_slot():

=====
    239         if (si->token.flags &
CKF_PROTECTED_AUTHENTICATION_PATH)
    240                 verbose("Deferring PIN entry to reader
keypad.");
    241         else {
    242                 snprintf(prompt, sizeof(prompt), "Enter PIN for
'%s': ",
    243                     si->token.label);
    244                 if ((pin = read_passphrase(prompt,
RP_ALLOW_EOF)) == NULL) {
    245                         debug_f("no pin specified");
    246                         return (-1);    /* bail out */
    247                 }
    248         }
    249         rv = provider->function_list->C_Login(si->session,
type, (u_char *)pin,
    250             (pin != NULL) ? strlen(pin) : 0);
=====

-- 
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.


More information about the openssh-bugs mailing list