Is it just me - or does, since version 3.0.7, IdentitiesOnly no longer include PKCS#11 keys ? With IdentitiesOnly set to yes - I see them getting picked up: debug2: pkcs11_fetch_keys: provider /Library/OpenSC/lib/onepin-opensc-pkcs11.so slot 0: RSA SHA256:etcetc debug1: have 2 keys but not being offered. With IdentitiesOnly set to no (or without; the default) - they get offered. Is that intentional ? Or what is the thinking behind this ? With kind regards, Dw _______________________________________________ openssh-unix-dev mailing list openssh-unix-dev@xxxxxxxxxxx https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev