Skip to content

Smartcard support for SSH client

Two small changes would enable smart card users to use their smartcard for ssh auth.

1. Installing the opensc package.
This would allow using ssh -I /usr/lib/x86_64-linux-gnu/pkcs11/opensc-pkcs11.so xy@ and similar commands.

2. Add PKCS11Provider /usr/lib/x86_64-linux-gnu/pkcs11/opensc-pkcs11.so to /etc/ssh/ssh_config
This allows using ssh xy@ or git clone/pull/push

As an alternative to step 2, users can add the line to their ~/.ssh/config. But that obviously requires awareness and persistence to be convenient.

Original created by @florian.uekermann on 16909 (Redmine)

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information