Using OpenSSH with smart cards HOWTO

[François Pérou]

On Wed, 2010-04-07 at 07:25 +0200, François Pérou wrote:
> > echo PKCS11Provider /usr/lib/opensc-pkcs11.so > /etc/ssh/config

/etc/ssh/ssh_config
SendEnv LANG LC_*
HashKnownHosts yes
GSSAPIAuthentication yes
GSSAPIDelegateCredentials no
PKCS11Provider /usr/lib/opensc-pkcs11.so

Then when I try ssh user at foo.com, it does not use smartcards.
Permission denied (publickey).
In fact, the -v lof shows that ssh does not search for smartcards.

If you would like to implement more smart card features, it would be
nice for some of you to have testing cards. To apply for free cards:

http://www.gooze.eu/feitian-pki-free-software-developer-card

Really, it would make me happy.

Kind regards,
Jean-Michel