Page MenuHome GnuPG
Create Task
Maniphest T7881

Public key URL cannot be cleared on ZeitControl OpenPGP v3.4 card
Testing, NormalPublic
Actions

Description

The URL field on smartcards cannot be cleared (it works for the name field).

To reproduce:

  1. Open Smartcards Dialog (in Kleopatra)
  2. Add an URL
  3. Edit the URL, clear the text, OK => Error

Kleopatra simply sends SCD SETATTR PUBKEY-URL to gpg-agent which fails with "Card error" (code: 108, source: SCD).

Details

Version
gpg4win-5.0.0-beta395 @ win11

Revisions and Commits

rLIBKLEO Libkleo
rLIBKLEOe4cd161a5b39 Also percent-escape the percent character
rLIBKLEOa2783bf33b62 Add helper to escape smartcard attribute values
rKLEOPATRA Kleopatra
rKLEOPATRA8bc59c8fe330 Set pubkey URL to a single space if setting to empty string fails

Event Timeline

timegrid created this task.Mon, Oct 27, 12:50 PM
timegrid created this object with edit policy "Contributor (Project)".
• TobiasFella added a subscriber: • TobiasFella.Tue, Oct 28, 11:22 AM

This works fine with my Yubikey. Maybe it's depends on the specific type of smartcard. What type of card are you using?

timegrid added a comment.Tue, Oct 28, 12:49 PM

ZeitControl OpenPGP v3.4 card

• ikloecker added a comment.Tue, Oct 28, 4:21 PM

Please attach scdaemon logs (created with debug ipc,cardio)

timegrid added a comment.Wed, Oct 29, 10:12 AM

scdaemon.log47 KBDownload

• ikloecker edited projects, added gnupg, scd; removed gpd5x, kleopatra.Thu, Oct 30, 10:02 AM

I could reproduce this with a ZeitControl OpenPGP v3.4 card, but (as Tobias) not with an (old) Yubikey. Looks like a bug in the card firmware.

• ikloecker renamed this task from Kleopatra: Card URL cannot be cleared to Public key URL cannot be cleared on ZeitControl OpenPGP v3.4 card.Thu, Oct 30, 10:06 AM
• ikloecker updated the task description. (Show Details)
timegrid added a comment.Thu, Oct 30, 10:22 AM

Note: It works with gpg-card url --clear.

• ikloecker claimed this task.Thu, Oct 30, 8:40 PM
• ikloecker added a project: kleopatra.

So we need to find out what gpg-card url --clear does to avoid the card error for the ZeitControl cards.

• ikloecker mentioned this in Unknown Object (Maniphest Task).Mon, Nov 3, 9:01 AM
• ikloecker added a comment.Mon, Nov 3, 9:24 AM

That's what gpg-card url --clear does

if (!strcmp (argstr, "--clear"))
  url = xstrdup (" "); /* No real way to clear; set to space instead. */
• ikloecker added a commit: rLIBKLEOa2783bf33b62: Add helper to escape smartcard attribute values.Mon, Nov 3, 5:01 PM
• werner triaged this task as Normal priority.Mon, Nov 3, 5:08 PM
• ikloecker edited projects, added gpd5x; removed scd, gnupg.Mon, Nov 3, 9:32 PM

I'm fixing this in Kleopatra similarly to gpg-card.

• ikloecker added a commit: rKLEOPATRA8bc59c8fe330: Set pubkey URL to a single space if setting to empty string fails.Mon, Nov 3, 9:57 PM
• ikloecker added a commit: rLIBKLEOe4cd161a5b39: Also percent-escape the percent character.
• ikloecker changed the task status from Open to Testing.Tue, Nov 4, 9:39 AM
• ikloecker moved this task from Backlog to WIP on the gpd5x board.

Fixed.

• ikloecker mentioned this in Unknown Object (Maniphest Task).Mon, Nov 10, 9:01 AM