Using OpenSSH with smartcards Why use OpenSSH with smart ...

Using OpenSSH with smartcards
ModLength : 2048
Key ref : 0 (0x0)
Native : yes
Path : 3f0050152900
Auth ID : 01
ID : 7645d913d5b4e03f3fe5*****f02324c23a7ebf
Now extract the RSA key in SSH format:
$ pkcs15-tool --read-ssh-key 7645d913d5b4e03f3fe5*****f02324c23a7ebf4
Using reader with a card: OmniKey CardMan 4321 00 00
Please enter PIN [User PIN]:
2048 65537 258115708996235*****134757454178319
ssh-rsa AAAAB3NzaC*****ed0aZdx9FFu/w6l7P5KsndWgP
Notice the RSA public key in SSH format:
ssh-rsa AAAB3NzaC*****ed0aZdx9FFu/w6l7P5KsndWgP
Installing public key on OpenSSH server
In this section we will copy your public RSA key to the ~/.ssh/authorized_keys file on server.
The .ssh notation denotes a hidden folder.
This folder should be inside the home of the user connecting.
Please notice that on the server, the .ssh folder may not exist.
In which case you will need to create it.
In our example, we check that the .ssh exist:
$ ls -lh /home/fperou/.ssh
authorized_keys
If the .ssh folder does not exist, create it using the user account:
$ mkdir ~/.ssh
$ touch ~/.ssh/authorized_keys
Copy the content of the public key (on smart card) to the ~/.ssh/authorized_keys file (on server). In our example:
ssh-rsa AAAAB3NzaC1yc2EAAAADAQ********9FFu/w6l7P5KsndWgP
Using ssh with smart cards
In our example, we log using ssh client, user 'fperou' on remote server 'remotehost':
GNU/Linux:
$ ssh -I /usr/lib/opensc-pkcs11.so fperou@remotehost
Enter PIN for 'FRANCOIS PEROU (User PIN)':****
Copyright GOOZE 2010-2011 http://www.gooze.eu 8 / 15