# Yubikey PIV PKCS#11

> This project is forked form: https://github.com/google/native-pkcs11


<br>

## OpenSC pkcs11-tool

Alias:

```shell
alias p11='pkcs11-tool --module /FULLPATH/libyubikey_piv_pkcs11.dylib'
```

List certificates:

```shell
p11 --list-object --type cert
```

## OpenSSH

Alias:

```shell
alias sshp11='ssh -I /FULLPATH/libyubikey_piv_pkcs11.dylib'
```

SSH server:

```shell
sshp11 root@example.com
```

## Configuration

Default retired slots are disabled, turn on:

```shell
export ENABLE_RETIRED=1
```