ssh-add -s <pkcs11lib> forks endless amounts of ssh-pkcs11-helper's, causes resource exhaustion
| Originator: | frpet1 | ||
| Number: | rdar://19592634 | Date Originated: | 25-Jan-2015 |
| Status: | Open | Resolved: | |
| Product: | OS X | Product Version: | Yosemite |
| Classification: | Crash/hang/data loss | Reproducible: | Always |
Summary: Using ssh-add -s <anything*> will spawn endless amounts of ssh-pkcs11-helper processes, which makes MacOSX slow because of resource exhaustion. (* = with anything, I mean that the file doesn't even need to exist) Steps to Reproduce: 1. open a terminal window, and run "ssh-agent -s" 2. now run ssh-add -s <a pkcs11 library (or whatever)> 3. write in correct or incorrect PIN: "Enter passphrase for PKCS#11:" SSH_AGENT_FAILURE Could not add card: /Library/OpenSC/lib/opensc-pkcs11.so You'll find more details here: https://github.com/OpenSC/OpenSC/issues/354#issuecomment-70370070 Expected Results: ssh-add -s <pkcs11lib> should with the correct PIN add my private key to the ssh-agent. Actual Results: Check out "ps -ef" and you'll see endless amounts of ssh-pkcs11-helper processes. The system becomes unusable because of resource exhaustion caused by all ssh-pkcs11-helper that keeps spawning. Version: 10.10.2 (14C99d) Notes: This blog also mentions the problem: http://sigg-iten.ch/learningbits/2014/11/13/first-steps-with-the-feitian-epass2003-smart-token-in-os-x/ Configuration: It always occurs, there are no exceptions
Comments
Please note: Reports posted here will not necessarily be seen by Apple. All problems should be submitted at bugreport.apple.com before they are posted here. Please only post information for Radars that you have filed yourself, and please do not include Apple confidential information in your posts. Thank you!