opensc

Smartcard and PKCS#11 tools for hardware signing

• Version recorded: 0.26.1
• Categories: rfid
• Upstream: https://github.com/OpenSC/OpenSC

What it does

Provides smartcard utilities and a PKCS#11 module that OpenSSH can load through ssh-agent.

Why you would want it

It is the PIV route for signing with a card instead of leaving an exportable private key on disk.

Before it will work

A supported smartcard and running pcscd. Load its PKCS#11 module into your agent yourself.

How it installs

• apt: opensc

Known problems

Token algorithm support differs by firmware and driver. A reader being listed does not prove a signing key is usable.

Keeping it current

• probe: apt policy
• strategy: apt_upgrade

Where to get help with the software itself

https://github.com/OpenSC/OpenSC/issues

Source: catalog/packages/opensc.yaml