Join GitHub today
GitHub is home to over 40 million developers working together to host and review code, manage projects, and build software together.Sign up
MacOS Sierra 10.12 failing to ssh-add pkcs11 key #75
Just for reference incase this hits anyone else
As of openssh 7.4, ssh-add will only accept pkcs libraries from directories specified at compile time or via ssh-agent run time flags on startup
The default match is
Common locations to find the opensc-pkcs11 or libykcs11 libraries on MacOS don't match this.
Homebrew installed opensc will end up /usr/local/Cellar/opensc and get sym-linked into /usr/local/lib but the ssh-add follows the sym-link and the location check fails.
Quickest work around more me was to
From OpenSSH 7.4 release notes:
I've just deployed OpenSC 0.18.0 onto High Sierra and ran into this problem, and can confirm the workaround above works.
Is there a way of getting the OpenSC installer on MacOS to do all the tasks necessary to make OpenSC functional on the Mac, rather than doing some of the tasks via the installer, and leaving other tasks to the end user to be done manually using the root account?
We've been stuck for ages unable to properly roll out smartcards, as they don't work for ordinary users.