yubikey-piv-pkcs11/README.md

Yubikey PIV PKCS#11

This project is forked form: https://github.com/google/native-pkcs11

OpenSC pkcs11-tool

Alias:

alias p11='pkcs11-tool --module /FULLPATH/libyubikey_piv_pkcs11.dylib'

List certificates:

p11 --list-object --type cert

OpenSSH

Alias:

alias sshp11='ssh -I /FULLPATH/libyubikey_piv_pkcs11.dylib'

SSH server:

sshp11 root@example.com

Configuration

Default retired slots are disabled, turn on:

export ENABLE_RETIRED=1