net-misc/openssh-10.2_p1 broke pkcs11 support?

[inf1nity]

Hi,

is it possible that openssh-10.2_p1 broke pkcs11 support? ssh is unable to get the keys from my smartcard.

Downgrading to 10.0_p2 fixes it immediately.

From what I found in the git log

https://github.com/gentoo/gentoo/commit ... sc/openssh

the ebuild for version 10.2_p1 was introduced by the following commit on 2025-10-11

https://github.com/gentoo/gentoo/commit ... 069f784b1a

It does not contain any patches for pkcs11 and there appear to be no commits changing that.

V_10_2_P1 was tagged on Oct 10: https://github.com/openssh/openssh-portable/tags

Thereafter there appear to be two commits that were related to restoring pkcs11 functionality:

Oct 13 https://github.com/openssh/openssh-port ... 37255fe175
Oct 17 https://github.com/openssh/openssh-port ... fe65d9b8aa

I found them while searching for broken ssh functionality related to openssh and version 10.2 in the ArchLinux openssh package.

Oct 25 https://gitlab.archlinux.org/archlinux/ ... 0fc5e7f9fa

Could someone please take a look and tell me if these or other patches are missing or if I'm doing something wrong?

Thanks in advance for any help!

[sam_]

It sounds indeed like we need to backport those commits. There are a few after the tag on the branch that we want: https://github.com/openssh/openssh-port ... ts/V_10_2/

Please file a Gentoo bug at bugs.gentoo.org and I'll have a look.