C[omp]ute

From: andrew cooke <andrew@...>

Date: Mon, 19 Nov 2012 16:11:36 -0300

Right now, I may be the only person in the world who can do this :o)

OK, so it's not a skill that is in huge demand, but it's taken me a week of
debugging - with MS numbed fingers and random dizzy spells for extra fun - to
get this to work.

Woo-hoo!
Andrew


PS Spyrus is a secure hardware dongle for storing certificates + keys.  This
work means that SSH can be configured to accept a user based on the
certificate they have loaded onto their hardware - effectively making SSH work
with secure hardware tokens.

It's not rocket science, and the above is already poossible with other
hardware, but Spyrus doesn't support the CryptoKI interface, so it required
some extra work.  Much of that work was done by co-workers at ISTI (and
Guralp; also OpenSSH needs this patch http://roumenpetrov.info/openssh/), but
I just finished tying everything together.


PPS If you arrived here via Google and also want to do this, you probably need
to contact ISTI at http://www.isti.com