Package: openssh-client Version: 1:7.1p1-1 Severity: important Hi,
I'm using the following SSH config to use my X220's TPM through simple-tpm-pk11: > Host test > PKCS11Provider libsimple-tpm-pk11.so Working authentication: > OpenSSH_6.9p1 Debian-3, OpenSSL 1.0.2e 3 Dec 2015 > … > debug1: manufacturerID <simple-tpm-pk11 manufacturer> cryptokiVersion 0.1 > libraryDescription <simple-tpm-pk11 library> libraryVersion 0.1 > debug1: label <Simple-TPM-PK11 token> manufacturerID <manuf id> model <model> > serial <serial> flags 0x0 > debug1: have 1 keys > … Failing authentication: > OpenSSH_7.1p1 Debian-1, OpenSSL 1.0.2e 3 Dec 2015 > … > debug1: manufacturerID <simple-tpm-pk11 manufacturer> cryptokiVersion 0.1 > libraryDescription <simple-tpm-pk11 library> libraryVersion 0.1 > debug2: pkcs11_add_provider: ignoring uninitialised token in slot 0 > no keys > … I haven't found a configuration stanza in ssh_config(5) that could solve that, I'm therefore bound to assume it's a regression in how openssh-client and libsimple-tpm-pk11.so interact. Cheers, OdyX -- System Information: Debian Release: stretch/sid APT prefers testing-proposed-updates APT policy: (500, 'testing-proposed-updates'), (500, 'proposed-updates'), (500, 'buildd-unstable'), (500, 'unstable'), (500, 'testing'), (500, 'stable'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.2.0-1-amd64 (SMP w/4 CPU cores) Locale: LANG=fr_CH.UTF-8, LC_CTYPE=fr_CH.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages openssh-client depends on: ii adduser 3.113+nmu3 ii dpkg 1.18.3 ii libc6 2.21-3 ii libedit2 3.1-20150325-1+b1 ii libgssapi-krb5-2 1.13.2+dfsg-4 ii libselinux1 2.4-3 ii libssl1.0.2 1.0.2e-1 ii passwd 1:4.2-3.1 ii zlib1g 1:1.2.8.dfsg-2+b1 Versions of packages openssh-client recommends: ii xauth 1:1.0.9-1 Versions of packages openssh-client suggests: pn keychain <none> ii ksshaskpass [ssh-askpass] 4:5.4.3-1 pn libpam-ssh <none> pn monkeysphere <none> ii ssh-askpass 1:1.2.4.1-9 -- no debconf information