scdProject
ActivePublic

Watchers

  • This project does not have any watchers.

Recent Activity

Thu, Oct 29

werner added a comment to T5115: OpenPGP card factory-reset and Kleopatra.

I forgot that we have LOCK and UNLOCK commands in scdaemon. This was implemented around 2005 but there are no more users in gpg meanwhile.

Thu, Oct 29, 11:50 AM · kleopatra, gnupg (gpg22), scd
werner created T5115: OpenPGP card factory-reset and Kleopatra.
Thu, Oct 29, 11:47 AM · kleopatra, gnupg (gpg22), scd

Wed, Oct 28

ikloecker added a comment to T5100: OpenPGP app overwrites Yubikey serial number.

I have tested this with Kleopatra. The good news is that SCD GETATTR $DISPSERIALNO now works for the piv app even if the openpgp app is enabled.

Wed, Oct 28, 10:24 AM · Testing, gnupg, scd, yubikey, kleopatra
gniibe triaged T5100: OpenPGP app overwrites Yubikey serial number as Normal priority.
Wed, Oct 28, 2:45 AM · Testing, gnupg, scd, yubikey, kleopatra

Tue, Oct 27

gniibe changed the status of T5100: OpenPGP app overwrites Yubikey serial number from Open to Testing.
Tue, Oct 27, 6:43 AM · Testing, gnupg, scd, yubikey, kleopatra
gniibe added a comment to T5100: OpenPGP app overwrites Yubikey serial number.

SCD commands:

  • SERIALNO
    • returns app specific serialno
  • LEARN
    • returns canonical serialno
Tue, Oct 27, 6:41 AM · Testing, gnupg, scd, yubikey, kleopatra
gniibe added a commit to T5100: OpenPGP app overwrites Yubikey serial number: rGe59d2b3632d8: scd: Handle canonical serialno and app specific serialno differently..
Tue, Oct 27, 6:41 AM · Testing, gnupg, scd, yubikey, kleopatra

Mon, Oct 26

gniibe closed T5102: READCERT immediately after WRITECERT fails as Resolved.

Pushed the change.

Mon, Oct 26, 6:32 AM · kleopatra, scd
gniibe added a commit to T5102: READCERT immediately after WRITECERT fails: rG8264b10d33e4: scd: Flush the cache when writing cert data object..
Mon, Oct 26, 6:32 AM · kleopatra, scd
gniibe added a commit to T5100: OpenPGP app overwrites Yubikey serial number: rG157f1de64e43: gpg,tools: Fix detecting OpenPGP card by serialno..
Mon, Oct 26, 6:01 AM · Testing, gnupg, scd, yubikey, kleopatra

Fri, Oct 23

gniibe added a commit to T5100: OpenPGP app overwrites Yubikey serial number: rG2d4de4b6f06c: scd: Handle Yubikey's multiple apps and serialno..
Fri, Oct 23, 9:34 AM · Testing, gnupg, scd, yubikey, kleopatra
gniibe added a commit to T5100: OpenPGP app overwrites Yubikey serial number: rGc8cc35dd2c10: scd: Use app_get_serialno for app_getattr..
Fri, Oct 23, 8:26 AM · Testing, gnupg, scd, yubikey, kleopatra
gniibe added a commit to T5100: OpenPGP app overwrites Yubikey serial number: rG65c91e601ae9: scd: Don't overwrite serialno for Yubikey..
Fri, Oct 23, 8:21 AM · Testing, gnupg, scd, yubikey, kleopatra

Wed, Oct 21

gniibe added a comment to T5100: OpenPGP app overwrites Yubikey serial number.

I created this patch D509: Yubikey supports two (or more) apps, serial number problem.

Wed, Oct 21, 7:53 AM · Testing, gnupg, scd, yubikey, kleopatra

Mon, Oct 19

werner added a comment to T5100: OpenPGP app overwrites Yubikey serial number.

But changing just the displayed S/N should not disturb anything.

Mon, Oct 19, 9:51 AM · Testing, gnupg, scd, yubikey, kleopatra
gniibe added a comment to T5100: OpenPGP app overwrites Yubikey serial number.

No, the above patch makes OpenPGP app stop working.

Mon, Oct 19, 9:34 AM · Testing, gnupg, scd, yubikey, kleopatra
gniibe added a comment to T5100: OpenPGP app overwrites Yubikey serial number.

(I don't know well about Yubikey specific serial number.)

Mon, Oct 19, 9:27 AM · Testing, gnupg, scd, yubikey, kleopatra
gniibe claimed T5100: OpenPGP app overwrites Yubikey serial number.
Mon, Oct 19, 6:41 AM · Testing, gnupg, scd, yubikey, kleopatra
gniibe claimed T5102: READCERT immediately after WRITECERT fails.
Mon, Oct 19, 6:37 AM · kleopatra, scd

Tue, Oct 13

ikloecker added a comment to T5102: READCERT immediately after WRITECERT fails.

This doesn't help. I think that's because after

flush_cached_data (app, dobj->tag);

do_writecert does

do_readkey (...)

which fills the cache again.

Tue, Oct 13, 12:19 PM · kleopatra, scd
werner added a comment to T5102: READCERT immediately after WRITECERT fails.

Caching issue. do_writecert in app-piv flushes the cache but may be the wrong DO. Can you try to

Tue, Oct 13, 10:11 AM · kleopatra, scd

Mon, Oct 12

ikloecker created T5102: READCERT immediately after WRITECERT fails.
Mon, Oct 12, 4:54 PM · kleopatra, scd

Fri, Oct 9

werner added a project to T5100: OpenPGP app overwrites Yubikey serial number: gnupg (gpg22).
Fri, Oct 9, 8:09 AM · Testing, gnupg, scd, yubikey, kleopatra

Thu, Oct 8

ikloecker added a comment to T5100: OpenPGP app overwrites Yubikey serial number.

I have added a workaround to Kleopatra: rKLEOPATRA57cf71b043d198f85270eb3b8782de6277b8b889

Thu, Oct 8, 1:36 PM · Testing, gnupg, scd, yubikey, kleopatra
ikloecker created T5100: OpenPGP app overwrites Yubikey serial number.
Thu, Oct 8, 1:29 PM · Testing, gnupg, scd, yubikey, kleopatra

Tue, Oct 6

gniibe added a commit to T5065: scdaemon doesn't detect card removal after boot/resume (Identiv SPR332v2): rG1f1b68eef72b: scd: Internal CCID driver: More fix for SPR532..
Tue, Oct 6, 5:04 AM · Testing, gnupg (gpg22), scd, Bug Report
gniibe added a commit to T5065: scdaemon doesn't detect card removal after boot/resume (Identiv SPR332v2): rG7db836c0e922: scd: Change handling of SPR532 card reader..
Tue, Oct 6, 5:04 AM · Testing, gnupg (gpg22), scd, Bug Report
gniibe added a commit to T5065: scdaemon doesn't detect card removal after boot/resume (Identiv SPR332v2): rGdd7cc24d5f92: scd: Fix CCID internal driver for interrupt transfer..
Tue, Oct 6, 5:04 AM · Testing, gnupg (gpg22), scd, Bug Report
gniibe added a commit to T4616: Smartcard: Card reset required - It should be automatic: rG165312dca90a: scd: ccid-driver: Initial getting ATR more robustly..
Tue, Oct 6, 5:04 AM · gnupg, scd

Sep 30 2020

gniibe added a comment to T5065: scdaemon doesn't detect card removal after boot/resume (Identiv SPR332v2).

I observed that the card reader's going erroneous state when I removed a card during its communication.
In this state, it never reports the card removal by the interrupt transfer.
I applied rG920f258eb601: scd: Internal CCID driver: More fix for SPR532. for this problem.

Sep 30 2020, 4:01 AM · Testing, gnupg (gpg22), scd, Bug Report
gniibe added a commit to T5065: scdaemon doesn't detect card removal after boot/resume (Identiv SPR332v2): rG920f258eb601: scd: Internal CCID driver: More fix for SPR532..
Sep 30 2020, 3:59 AM · Testing, gnupg (gpg22), scd, Bug Report

Sep 29 2020

werner added a project to T5085: Filter APDUs in log output: Feature Request.
Sep 29 2020, 11:23 AM · Feature Request, gnupg (gpg22), scd
werner created T5085: Filter APDUs in log output.
Sep 29 2020, 11:21 AM · Feature Request, gnupg (gpg22), scd

Sep 28 2020

gniibe added a commit to T5065: scdaemon doesn't detect card removal after boot/resume (Identiv SPR332v2): rG684a52dffa8b: scd: Change handling of SPR532 card reader..
Sep 28 2020, 6:38 AM · Testing, gnupg (gpg22), scd, Bug Report
gniibe added a project to T5065: scdaemon doesn't detect card removal after boot/resume (Identiv SPR332v2): Testing.

The patch rG684a52dffa8b: scd: Change handling of SPR532 card reader. makes me happier. It is more stable.

Sep 28 2020, 6:37 AM · Testing, gnupg (gpg22), scd, Bug Report
turkja added a comment to T5065: scdaemon doesn't detect card removal after boot/resume (Identiv SPR332v2).

This is also what I found out with my tests with the libvirt usb: removing and redirecting back the device got it working again.

Sep 28 2020, 5:58 AM · Testing, gnupg (gpg22), scd, Bug Report
gniibe added a comment to T5065: scdaemon doesn't detect card removal after boot/resume (Identiv SPR332v2).

Testing more, I managed to encounter failure with physical usb.
Once in this failure mode, I need to remove the card reader from USB and reinsert again.
I need to figure out a sequence to avoid this situation and to reset the card reader correctly.

Sep 28 2020, 4:53 AM · Testing, gnupg (gpg22), scd, Bug Report
gniibe added a comment to T5065: scdaemon doesn't detect card removal after boot/resume (Identiv SPR332v2).

I tested with physical usb, did multiple operations with external events (insert/remove/etc. for card). I haven't seen any problem (if so, I were doing more fixes), so far.

Sep 28 2020, 1:44 AM · Testing, gnupg (gpg22), scd, Bug Report

Sep 26 2020

turkja added a comment to T5065: scdaemon doesn't detect card removal after boot/resume (Identiv SPR332v2).

Ok. Tried to test this with master, but failed. I got it compiled and installed, and it actually detected the first removal after reboot/suspend/reader attach/whatever reason, but after that when I inserted the card back, it didn't function anymore. I suppose you also tried that? I mean that's the use case, I suppose: to be able to remove/insert the card reliably all day long.

Sep 26 2020, 2:03 PM · Testing, gnupg (gpg22), scd, Bug Report

Sep 25 2020

gniibe added a comment to T5065: scdaemon doesn't detect card removal after boot/resume (Identiv SPR332v2).

Currently, yes. After some testing, I'll backport it to 2.2.

Sep 25 2020, 2:03 AM · Testing, gnupg (gpg22), scd, Bug Report

Sep 24 2020

turkja added a comment to T5065: scdaemon doesn't detect card removal after boot/resume (Identiv SPR332v2).

Nice, thanks! If I want to try this fix, should I just compile the master tree?

Sep 24 2020, 2:45 PM · Testing, gnupg (gpg22), scd, Bug Report
gniibe added a commit to T5065: scdaemon doesn't detect card removal after boot/resume (Identiv SPR332v2): rG7cbb513a2dc1: scd: Fix CCID internal driver for interrupt transfer..
Sep 24 2020, 1:00 PM · Testing, gnupg (gpg22), scd, Bug Report

Sep 17 2020

turkja added a comment to T5065: scdaemon doesn't detect card removal after boot/resume (Identiv SPR332v2).

This is everything lsusb knows about the device:

Sep 17 2020, 8:28 AM · Testing, gnupg (gpg22), scd, Bug Report
gniibe added a comment to T5065: scdaemon doesn't detect card removal after boot/resume (Identiv SPR332v2).

And please report the output of lsusb -d 04e6:e003 for the information of the card reader.

Sep 17 2020, 8:27 AM · Testing, gnupg (gpg22), scd, Bug Report
gniibe added a comment to T5065: scdaemon doesn't detect card removal after boot/resume (Identiv SPR332v2).

@turkja Thanks for your information.
May I ask you one thing?
Please show me the usb VID:PID of your card reader.
Is it 04e6:e003?
You can examine a line of the output by lsusb.

Sep 17 2020, 8:23 AM · Testing, gnupg (gpg22), scd, Bug Report
turkja added a comment to T5065: scdaemon doesn't detect card removal after boot/resume (Identiv SPR332v2).

Just wanted to add to my initial findings:

  • I was not using proprietary drivers (libscmccid.so.5.0.35), because the installer script fails to install on default CentOS 8 pcsc-lite. So the distribution pcsc-lite also doesn't have this issue.
  • Fastest way to test this condition is to just detach/attach the reader device.
  • Proprietary drivers doesn't support secure pin entry!
Sep 17 2020, 5:59 AM · Testing, gnupg (gpg22), scd, Bug Report

Sep 16 2020

gniibe updated the task description for T5001: Card specification enhancement.
Sep 16 2020, 8:51 AM · Feature Request, scd
gniibe claimed T5065: scdaemon doesn't detect card removal after boot/resume (Identiv SPR332v2).
Sep 16 2020, 8:04 AM · Testing, gnupg (gpg22), scd, Bug Report
gniibe added a comment to T5065: scdaemon doesn't detect card removal after boot/resume (Identiv SPR332v2).

Thanks for sending.

Sep 16 2020, 8:01 AM · Testing, gnupg (gpg22), scd, Bug Report
werner added a comment to T5065: scdaemon doesn't detect card removal after boot/resume (Identiv SPR332v2).

Here is the output for an SCM SPR532

Sep 16 2020, 7:55 AM · Testing, gnupg (gpg22), scd, Bug Report