OpenSSH 10.1p1 and ed25519 keys hosted on PKCS#11 tokens
Colin Watson
cjwatson at debian.org
Thu Oct 9 20:43:06 AEDT 2025
On Thu, Oct 09, 2025 at 08:39:18AM +1100, Damien Miller wrote:
>Try this patch. You'll need to re-run configure (or at least
>config.status) and make
>
>diff --git a/Makefile.in b/Makefile.in
>index 19a9e4dcf..ea38671f7 100644
>--- a/Makefile.in
>+++ b/Makefile.in
>@@ -157,7 +157,7 @@ SSHADD_OBJS= ssh-add.o $(P11OBJS) $(SKOBJS)
>
> SSHAGENT_OBJS= ssh-agent.o $(P11OBJS) $(SKOBJS)
>
>-SSHKEYGEN_OBJS= ssh-keygen.o sshsig.o $(P11OBJS) $(SKOBJS)
>+SSHKEYGEN_OBJS= ssh-keygen.o sshsig.o ssh-pkcs11.o $(SKOBJS)
>
> SSHKEYSIGN_OBJS=ssh-keysign.o readconf.o uidswap.o $(P11OBJS) $(SKOBJS)
https://bugs.debian.org/1117638 looks somewhat similar to this, and the
reporter told me in private email that a package with the above patch
applied produces the same error.
--
Colin Watson (he/him) [cjwatson at debian.org]
More information about the openssh-unix-dev
mailing list