Using OpenSSH with smartcards Why use OpenSSH with smart ...

Using OpenSSH with smartcards
debug1: pkcs11_provider_unref: 0x153fb90 refcount 2
debug1: Authentication succeeded (publickey).
debug1: channel 0: new [client-session]
debug1: Requesting no-more-sessions@openssh.com [6]
debug1: Entering interactive session.
Linux firewall 2.6.32-trunk-486 #1 Sun Jan 10 05:53:18 UTC 2010 i686
The programs included with the Debian GNU/Linux system are free software;
the exact distribution terms for each program are described in the
individual files in /usr/share/doc/*/copyright.
Debian GNU/Linux comes with ABSOLUTELY NO WARRANTY, to the extent
permitted by applicable law.
Last login: Thu Apr 1 16:57:20 2010 from xxxxxxxxxxxx
Make sure that OpenSSH is asking for PIN and not using local keys in ~/.ssh on the client side.
Using scp with smartcards
scp allows to specify any OpenSSH syntax using -o switch.
GNU/Linux:
To use smart cards, add this switch to your scp command line:
-o PKCS11Provider=/usr/lib/opensc-pkcs11.so
Therefore a common file transfer using scp would be:
$ scp -v -o PKCS11Provider=/usr/lib/opensc-pkcs11.so filename user@host:path
To ease connection, you may add this line to /etc/ssh/ssh_config:
PKCS11Provider /usr/lib/opensc-pkcs11.so
Mac OS X:
To use smart cards, add this switch to your scp command line:
-o PKCS11Provider=/Library/OpenSC/lib/opensc-pkcs11.so
Therefore a common file transfer using scp would be:
$ scp -v -o PKCS11Provider=//Library/OpenSC/lib/opensc-pkcs11.so filename user@host:path
To ease connection, you may add this line to /opt/local/etc/ssh/ssh_config:
PKCS11Provider /Library/OpenSC/lib/opensc-pkcs11.so
It is possible to enter several filenames or wildcards to avoid sending multiple commands:
$ scp -v filename1 filename2 filename-other* user@host:path
Copyright GOOZE 2010-2011 http://www.gooze.eu 10 / 15