[Bug 791747] [NEW] Cannot add keys from PKCS#11 provider

[Jan Krajdl]

Public bug reported:

it's not possible to add keys from security devices with ssh-agent which is running from Ubuntu session. I'm trying to use authentication with Rainbow iKey 3000 token with OpenSC. When I after login type into terminal this:
ssh-add -s /usr/lib/opensc-pkcs11.so
and after that I type PIN to the token, I get:
SSH_AGENT_FAILURE
Could not add card: /usr/lib/opensc-pkcs11.so

When I run new ssh-agent in terminal, set env variables, this command
works OK - load keys from the token and I'm able to authenticate with
keys in them. So whole openssh agent is working OK but I think that
there is somewhere bug when Ubuntu running this agent after login.

** Affects: openssh (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: opensc openssh pkcs11 ssh

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to openssh in Ubuntu.
https://bugs.launchpad.net/bugs/791747

Title:
  Cannot add keys from PKCS#11 provider

Status in “openssh” package in Ubuntu:
  New

Bug description:
  it's not possible to add keys from security devices with ssh-agent which is running from Ubuntu session. I'm trying to use authentication with Rainbow iKey 3000 token with OpenSC. When I after login type into terminal this:
  ssh-add -s /usr/lib/opensc-pkcs11.so
  and after that I type PIN to the token, I get:
  SSH_AGENT_FAILURE
  Could not add card: /usr/lib/opensc-pkcs11.so

  When I run new ssh-agent in terminal, set env variables, this command
  works OK - load keys from the token and I'm able to authenticate with
  keys in them. So whole openssh agent is working OK but I think that
  there is somewhere bug when Ubuntu running this agent after login.