I'm using keychain-pkcs11 to authenticate to SSH using a smartcard-derived key by doing ssh-add -s /usr/local/lib/keychain-pkcs11.dylib. This works fine initially, but if some time passes, the PIN seems to time out, because when I try to make an ssh connection using that key it pops up a GUI pin entry window. The GUI appears to accept the pin, but this always leads to a failed ssh login (next time it happens I'll save the error message and post here). I then have to re-init the ssh agent by doing ssh-add -e /usr/lib...pkcs11.dylib; ssh-add -s /usr/lib...pkcs11.dylib. During this reinit it again asks for my CAC pin, but with a text prompt, not a GUI window popup, and then the ssh works.
I'm using keychain-pkcs11 to authenticate to SSH using a smartcard-derived key by doing
ssh-add -s /usr/local/lib/keychain-pkcs11.dylib. This works fine initially, but if some time passes, the PIN seems to time out, because when I try to make an ssh connection using that key it pops up a GUI pin entry window. The GUI appears to accept the pin, but this always leads to a failed ssh login (next time it happens I'll save the error message and post here). I then have to re-init the ssh agent by doingssh-add -e /usr/lib...pkcs11.dylib; ssh-add -s /usr/lib...pkcs11.dylib. During this reinit it again asks for my CAC pin, but with a text prompt, not a GUI window popup, and then the ssh works.