Page MenuHome GnuPG

disable-ccid breaks gpg-agent caching on MacOS (gpg 2.3.1)
Closed, DuplicatePublic

Description

Hi,

I'm not sure this is a gpg bug or a scdaemon bug, so forgive me if I report this in the wrong place.

After upgrading to BigSur and gpg 2.3.1, my yubikey no longer worked. I found similar reports ont his site, and the provided solution was to put disable-ccid in the scdaemon.conf file. While this solves the issue, I discovered an unwanted side-effect of this work-around:

On every decrypt operation, I always get prompted for my YubiKey pin code again. This was not the case before the upgrade.

This what I have in my gpg-agent.conf file:

default-cache-ttl 600
max-cache-ttl 7200
enable-ssh-support
pinentry-program /usr/local/bin/pinentry-mac

Anyone else able to reproduce this problem on MacOS BigSur?

Details

Version
2.3.1