[OpenSC-devel] Wacky idea to make OpenSC support in OpenSSH more palatable to Debian

[Nils Larsch]

Eric Dorland wrote:
> Hi Guys,
> 
> I was thinking about a good way to get OpenSC support in OpenSSH more readily
> acceptable to Debian (and other distributions). Basically ssh is such
> a core component, the maintainer doesn't want to add more dependencies
> on it (see http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=231472). 
> 
> So my thought was to make the OpenSC code in OpenSSH use dlopen
> instead of directly linking. That way the code could included easily,
> without actually requiring the library to be there if the user didn't
> want it. Looking at the code, I don't think this will be really hard
> to do. 
> 
> So what do you guys think? Any problems with this idea? Do you think
> the OpenSSH upstream would accept changes along those lines?
> 
> While I'm on the topic, is there any progress on the last niggling pin
> entry code into upstream? 

FYI I'm just writting an pkcs11 implementation for openssh which I
think might replace the somewhat buggy opensc stuff in openssh. Whether
or not the openssh maintainers will accept a dlopen is another question,
I'm a bit sceptical, but we'll see.

Nils