Page MenuHome GnuPG
Create Task
Maniphest T5063

Use of some "SCD" command through extra socket
Closed, ResolvedPublic
Actions

Description

In master, gpg frontend uses "SCD SERIALNO", "SCD GETINFO card_list", "SCD KEYINFO" for normal crypto operation.

It seems that smartcard cannot be used any more through extra socket, because of this.

Revisions and Commits

rG GnuPG
rG8a84a71f3a58 agent: Fix regression for access through the extra secket.

Related Objects
Search...

Event Timeline

• gniibe created this task.Sep 11 2020, 4:35 AM
• gniibe added a commit: rG8a84a71f3a58: agent: Fix regression for access through the extra secket..Sep 18 2020, 3:36 AM
• gniibe added a comment.Sep 18 2020, 3:51 AM

"SCD GETINFO card_list" is not needed actually. It was my misunderstanding.

• gniibe added a comment.Sep 18 2020, 3:52 AM

Fixed in master.

• gniibe closed this task as Resolved.Sep 18 2020, 3:55 AM
• gniibe added a comment.Oct 6 2020, 7:17 AM

Perhaps, don't allow automatic use of available card keys would be better:

diff --git a/agent/command.c b/agent/command.c
index 160979dae..b6286becf 100644
--- a/agent/command.c
+++ b/agent/command.c
@@ -2292,13 +2292,7 @@ cmd_scd (assuan_context_t ctx, char *line)
       if ((argc == 1 && !strcmp (argv[0], "SERIALNO"))
           || (argc == 2
               && !strcmp (argv[0], "GETINFO")
-              && !strcmp (argv[1], "version"))
-          || (argc == 2
-              && !strcmp (argv[0], "GETATTR")
-              && !strcmp (argv[1], "KEY-FPR"))
-          || (argc == 2
-              && !strcmp (argv[0], "KEYINFO")
-              && !strcmp (argv[1], "--list=encr")))
+              && !strcmp (argv[1], "version")))
         xfree (l);
       else
         {

I don't think adding another option for gpg-agent is good.