PKCS11 support missing in OpenSSH

Originator:frpet1
Number:rdar://13031941 Date Originated:17-Jan-2013 11:38 AM
Status:Closed Resolved:23-Oct-2013 09:11 AM
Product:Mac OS X Product Version:Fixed since 10.9.0
Classification:Security Reproducible:Always
 
Summary:
The included OpenSSH in MacOSX 10.6.8 -> current (10.8.2) has lost PKCS#11 support 

Steps to Reproduce:
-bash$ /usr/bin/ssh -I <user> some.server.org
no support for PKCS#11.

Expected Results:
that ssh check if there is any matching key on my SmartCard

Actual Results:
I can't use my SmartCard private key then I use ssh.

Regression:

Notes:
--- OpenSSH-175.1/openssh/config_macosx.h.orig  2013-01-17 11:35:03.000000000 +0100
+++ OpenSSH-175.1/openssh/config_macosx.h       2013-01-17 11:35:35.000000000 +0100
@@ -136,7 +136,7 @@
 #define DISABLE_WTMPX 1
 
 /* Enable for PKCS#11 support */
-/* #undef ENABLE_PKCS11 */
+#define ENABLE_PKCS11 1
 
 /* File names may not contain backslash characters */
 /* #undef FILESYSTEM_NO_BACKSLASH */

Comments


Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!