Kleopatra: Smartcard unusable secret key until used via command line
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	joeyberkovitz
	Jan 14 2022, 2:54 PM

Description

Tested on a Windows 10 VM running 21H1 - 19044.1288. Gpg4win version 4.0.0, GnuPG 2.3.4.

When using a smartcard with the latest version of Kleopatra for the first time, any operations fail with message "unusable secret key". If the smartcard is then used for the same operation via command line, the operation succeeds, and a shadowed private key file is created under %appdata%\gnupg\private-keys-v1.d. After that key file is created, future operations using the corresponding private key succeed in Kleopatra. If that key file is ever removed, Kleopatra fails again, but the command line continues to function and automatically generate the key file.

Details

Version: 4.0.0

Revisions and Commits

rKLEOPATRA Kleopatra
	rKLEOPATRAc5d6bd1b73d6 Ensure that key stubs are created for all keys on a smartcard

Related Objects

Mentioned In: T6386: gpg-agent 2.2: Command "READKEY --card --no-data -- OPENPGP.1" overwrites protected-private-key with shadowed-private-key

Event Timeline

joeyberkovitz created this task.Jan 14 2022, 2:54 PM

• werner added a project: kleopatra.Jan 17 2022, 7:45 AM

Potential fix posted here: https://invent.kde.org/pim/kleopatra/-/merge_requests/11

• werner triaged this task as Normal priority.Jan 20 2022, 8:40 AM

ikloecker added a commit: rKLEOPATRAc5d6bd1b73d6: Ensure that key stubs are created for all keys on a smartcard.Jan 21 2022, 8:11 PM

ikloecker renamed this task from Smartcard unusable secret key until used via command line to Kleopatra: Smartcard unusable secret key until used via command line.Dec 5 2022, 9:11 AM

ikloecker mentioned this in T6386: gpg-agent 2.2: Command "READKEY --card --no-data -- OPENPGP.1" overwrites protected-private-key with shadowed-private-key.Feb 24 2023, 11:58 AM

Noticed this issue was still open. This was resolved.