Page MenuHome GnuPG
Create Task
Maniphest T6383

GnuPG 2.4.0 not working with Yubikey NEO
Closed, ResolvedPublic
Actions

Description

Hi @werner,
Slackware just upgraded to GnuPG 2.4.0(T6303) and I got a regression while using Yubikey NEO.
Appear the problem show as a permission error:

2023-02-21 19:44:19 scdaemon[11577] DBG: ccid-driver: usb_open failed: LIBUSB_ERROR_ACCESS
2023-02-21 19:44:19 scdaemon[11577] ccid open error: skip
2023-02-21 19:44:19 scdaemon[11577] check permission of USB device at Bus 001 Device 011
2023-02-21 19:44:19 scdaemon[11577] DBG: chan_7 -> ERR 100696144 No such device <SCD>

This error don't occurs on version 2.2.41.
I am uploading the logs as described to me in my previous bug reports.

log-file /somewhere/scd.log
verbose
debug ipc,reader,app
debug-ccid-driver

scd-2.2.41.log16 KBDownload

scd-2.4.0.log2 KBDownload

Details

Version
2.4.0

Related Objects

Event Timeline

gbschenkel created this task.Feb 21 2023, 11:51 PM
• werner closed this task as Resolved.Feb 22 2023, 8:57 AM
• werner claimed this task.
• werner edited projects, added Support; removed Bug Report.

You need write access to the usb device (e.g. /dev/bus/usb/001/011) or you install pcscd and put "disable-ccid-driver" into scdaemon.conf.

gbschenkel added a comment.EditedFeb 22 2023, 12:05 PM

I can't access even trying using root.
pcsc-lite was already installed. I tried using disable-ccid-driver as advised but didn't help, scd.log don't even get written using this option.

I am using pcsc-lite v1.9.9 and ccid v1.5.2.

Doing gpg2 --card-status:

08:10 $ gpg2 --card-status
gpg: error getting version from 'scdaemon': No SmartCard daemon
gpg: OpenPGP card not available: No SmartCard daemon
gbschenkel added a comment.Feb 22 2023, 12:22 PM

Okay, gpg2 --card-status is accessible using sudo/su.
But I still don't know why bumping from 2.2.41 to 2.4.0 the use of pcsc-lite + ccid stopped work.

gbschenkel added a comment.Feb 22 2023, 2:39 PM
In T6383#167887, @werner wrote:

You need write access to the usb device (e.g. /dev/bus/usb/001/011) or you install pcscd and put "disable-ccid-driver" into scdaemon.conf.

I tried use disable-ccid instead on scdaemon.conf as decribed in T4673, and it worked.
Also worked recompiling GnuPG 2.4.0 with the option --disable-ccid-driver, which I think was misplaced on the comment before.
Thanks again @werner.

• werner added a comment.Feb 22 2023, 5:56 PM

Ooops: You need to put

disable-ccid

intot scdaemon.conf . No need to recompile w/o ccid support.