Per Nilsson

I think this is probably the wrong approach after all, even if it happens to be very convenient and slots into the code very smoothly. It would essentially negate the...

I think it is more in line with pkcs#11 that the _application_ chooses what to do, after all there is support in pkcs11 to to it well from the application,...

When I tested this on Windows for the 2.0.0 release the problem was that VeraCrypt couldn't load the ykcs11 dll (or it's dependencies). I verified this using pkcs11-spy, which can...

Regarding your error above with opensc-pkcs11 I think it happens because opensc-pkcs11 indicates that certain objects exists even though they do not contain any data. A YubiKey doesn't normally contain...

To read/write data to PIV slots please see the following link: https://developers.yubico.com/yubico-piv-tool/Actions/read_write_objects.html Be aware that the data in the slots has specific formats according to PIV specification. Neither yubico-piv-tool nor...

Regarding file names I think you need to use the exact filenames as listed, no extensions. Keep in mind that there aren't really any file names in the PIV application,...

OK, to me that would indicate that VeraCrypt probably sets the search path for dependent libraries restrictively, for security reasons presumably. Thx for the info!

Would you be able to start the ssh-agent in debug mode as described above, with the YKCS11_DBG env variable ? The reason this would be interesting is that I've seen...

The issue that happens on my machine is that the login process takes exclusive access to the PC-SC reader, preventing yubico-piv-tool from accessing it. If you run the ssh-agent, or...

OK, thx for investigating this issue !