Home » Using OpenSSH with smartcards

Smartcard Prerequisites

As a prerequisite, you should read our smart card quickstarter guide, in order to learn how to install and configure smartcards.

Hereafter, we consider that you installed a smart card reader and configured a smart card either with a self-signed certificate or your existing RSA key in OpenSSH format like explained in the guide.

Dump the content of your smartcard to make sure your RSA certificates are installed:

$ pkcs15-tool --dump
PKCS#15 Card [François Pérou]:
Version : 1
Serial number : 2851294610040810
Manufacturer ID: EnterSafe
Last update : 20100919114626Z
Flags : EID compliant

PIN [User PIN]
Com. Flags: 0x3
ID : 01
Flags : [0x32], local, initialized, needs-padding
Length : min_len:4, max_len:16, stored_len:16
Pad char : 0x00
Reference : 1
Type : ascii-numeric
Path : 3f005015

Private RSA Key [Private Key]
Com. Flags : 3
Usage : [0x4], sign
Access Flags: [0x0]
ModLength : 2048
Key ref : 1
Native : yes
Path : 3f005015
Auth ID : 01
ID : f7af721c8db60f82d726930ccf7d253e73aa45c6

Public RSA Key [Public Key]
Com. Flags : 2
Usage : [0x4], sign
Access Flags: [0x0]
ModLength : 2048
Key ref : 0
Native : no
Path : 3f0050153000
Auth ID :
ID : f7af721c8db60f82d726930ccf7d253e73aa45c6

Bookmark/Search this post with