Re: [PATCH] Readable return codes for pkcs11 identities

[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

 



Done, thanks. https://bugzilla.mindrot.org/show_bug.cgi?id=3130

On Thu, Mar 5, 2020 at 7:32 AM Jakub Jelen <jjelen@xxxxxxxxxx> wrote:
>
> On Wed, 2020-02-26 at 18:20 -0800, Jacob Hoffman-Andrews wrote:
> > Right now, if I typo my PIN for a PKCS#11 token, I get the
> > inscrutable message:
> >
> > $ ssh -I /path/to/module user@xxxxxxxxxxx
> > Enter PIN for 'SSH key':
> > C_Login failed: 160
> >
> > I'd prefer to receive a more useful message:
> >
> > Login to PKCS#11 token failed: Incorrect PIN
> >
> > I've attached a patch that adds specific handling for three common
> > error cases: Incorrect PIN, PIN too long or too short, and PIN
> > locked.
> > I've also tweaked the fallback error case to indicate that it is a
> > PKCS#11-specific error. Hope this is useful!
>
> Please, open a new bug with the patch so it will not get lost in the
> mailing list. This is certainly something useful to have.
>
> Regards,
> --
> Jakub Jelen
> Senior Software Engineer
> Security Technologies
> Red Hat, Inc.
>
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@xxxxxxxxxxx
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev



[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux