Hello, On Feb 23, 2011, at 4:26 PM, NdK wrote: > I'm always the one that finds problems :) That's great testing!
> Waiting to "fix" CA issue, I'm trying to use an on-card key to > authenticate a SSH user. Which issue? > But when I try to use it, I get: > -8<-- > $ ssh otheruser@myhost > Enter PIN for 'MyEID (User Auth)': > C_Sign failed: 257 This means: #define CKR_USER_NOT_LOGGED_IN (0x101UL) Having OpenSC debug.log would be useful - is the right PIN verified before as it should be. > ssh_rsa_sign: RSA_sign failed: error:25066067:DSO support > routines:DLFCN_LOAD:could not load the shared library > Permission denied (publickey,password,keyboard-interactive). > -8<-- > > Even an strace didn't help locating the lib that can't be loaded. Maybe that error is not relevant at all. > After that, I often find the card unresponsive after that error: > -8<-- > $ pkcs15-tool -k > Using reader with a card: SCM SCR 335 [CCID Interface] (504012DD) 00 00 > Failed to connect to card: Unresponsive card (correctly inserted?) > -8<-- > Just issuing multiple times the same command (w/o touching the card or > the reader!) solves the issue. That is interesting. I'm seeing this as well quite a lot with different Estonian eID cards recently. I've not extracted logs from pcscd for this problem but that might be useful. Does unpower/hard reset of the card work? If you could produce a pcscd/libccid log with USB level output [1] would be very good. [1] http://pcsclite.alioth.debian.org/ccid.html#support -- @MartinPaljak.net +3725156495 _______________________________________________ opensc-devel mailing list opensc-devel@lists.opensc-project.org http://www.opensc-project.org/mailman/listinfo/opensc-devel
