Add support to ssh-keygen to use keys that are stored in a PKCS#11 token to sign certificates.
Created attachment 1892 [details] /home/djm/keygen-ca-pkcs11.diff Patch solving the problem
Patch applied. This will be in OpenSSH 5.6
With the release of OpenSSH 5.6p1 this bug is now considered closed. If you have further problems please reopen or file a new bug as appropriate.