yubikeyTag
ActivePublic

Members

  • This project does not have any members.

Recent Activity

Aug 23 2019

vsrinu26f added a comment to T2893: gnupg should used ccid card key material fingerprints and not serial number.

And also this is excellent point.

Aug 23 2019, 8:57 PM · yubikey, Feature Request, gnupg

Aug 16 2019

gniibe claimed T2893: gnupg should used ccid card key material fingerprints and not serial number.
Aug 16 2019, 6:15 AM · yubikey, Feature Request, gnupg

Aug 13 2019

werner added a project to T2893: gnupg should used ccid card key material fingerprints and not serial number: yubikey.
Aug 13 2019, 6:40 PM · yubikey, Feature Request, gnupg

Jan 23 2019

gniibe closed T4308: scdaemon does not survive suspend/resume with Yubikey4 as Resolved.

Thank you. I was waiting your feedback.

Jan 23 2019, 2:11 AM · yubikey, Bug Report

Jan 22 2019

raboof added a comment to T4308: scdaemon does not survive suspend/resume with Yubikey4.

I can confirm this has the desired effect for me on master (f97dc55ff1b041071bc3cbe98aa761bf77bb7ac8). Should we mark this issue as 'resolved' or do you have another process for that?

Jan 22 2019, 6:43 PM · yubikey, Bug Report

Jan 17 2019

gniibe added a commit to T4308: scdaemon does not survive suspend/resume with Yubikey4: rG9dc76d599cd4: scd: Fix for USB INTERRUPT transfer..
Jan 17 2019, 12:14 AM · yubikey, Bug Report

Jan 7 2019

gniibe added a commit to T4308: scdaemon does not survive suspend/resume with Yubikey4: rG5ab3bc422a5c: scd: Fix for USB INTERRUPT transfer..
Jan 7 2019, 6:30 AM · yubikey, Bug Report
gniibe added a comment to T4308: scdaemon does not survive suspend/resume with Yubikey4.

Thanks a lot for your logs. I see what's going on here.
For some reason, Yubikey keeps running after failure by suspend/resume (perhaps, because it serves for multiple functionalities of USB HID for OTP, as well as CCID for OpenPGPcard).
This failure mode is not expected by the current implementation of scdaemon, under in-stock CCID driver.

Jan 7 2019, 6:06 AM · yubikey, Bug Report

Jan 4 2019

raboof added a comment to T4308: scdaemon does not survive suspend/resume with Yubikey4.

Attached the wireshark log

Jan 4 2019, 10:53 AM · yubikey, Bug Report
gniibe claimed T4308: scdaemon does not survive suspend/resume with Yubikey4.

The workaround in T3825 is for PC/SC driver. So, it is not the case for internal stock CCID driver.
'scd reset /bye' does not let the scdaemon do reset process of the card itself. It resets the transaction of scdaemon.

Jan 4 2019, 6:16 AM · yubikey, Bug Report

Jan 3 2019

werner added a project to T4308: scdaemon does not survive suspend/resume with Yubikey4: yubikey.
Jan 3 2019, 10:22 AM · yubikey, Bug Report

May 17 2018

ccharabaruk added a watcher for yubikey: ccharabaruk.
May 17 2018, 5:44 PM

Apr 11 2018

gniibe added a project to T3843: Unable to generate RSA4096 keys on Yubikey 4 on OSX Sierra: Info Needed.
Apr 11 2018, 10:02 AM · Info Needed, MacOS, yubikey, scd, Bug Report
gniibe triaged T3843: Unable to generate RSA4096 keys on Yubikey 4 on OSX Sierra as Normal priority.
Apr 11 2018, 10:02 AM · Info Needed, MacOS, yubikey, scd, Bug Report
gniibe closed T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows as Resolved.

Workaround is implemented in 2.2.6.

Apr 11 2018, 1:59 AM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey

Apr 5 2018

werner added projects to T3843: Unable to generate RSA4096 keys on Yubikey 4 on OSX Sierra: scd, yubikey.
Apr 5 2018, 5:22 PM · Info Needed, MacOS, yubikey, scd, Bug Report

Mar 28 2018

gniibe claimed T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows.
Mar 28 2018, 1:29 AM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey

Mar 13 2018

vovcacik added a comment to T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows.

I've contacted Yubico to review this ticket.

Mar 13 2018, 3:03 PM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey
vovcacik added a comment to T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows.

Hi, that works as advertised. If this is the best solution yubikey permits us I am ok with it.

Mar 13 2018, 2:36 PM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey
gniibe added a comment to T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows.

I put an entry: https://wiki.gnupg.org/SmartCard#Known_problem_of_Yubikey

Mar 13 2018, 5:35 AM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey
gniibe added a comment to T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows.

After resume, because resume is not detected, some user interaction is required to cause an error.
gpg --card-status (which will only show partial information) is enough. Or, ssh failure. After failure, scdaemon reconnects the token.
Then, you can use it again without plug-off/plug-in.

Mar 13 2018, 4:58 AM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey
gniibe added a commit to T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows: rGc84bae69e9e0: scd: After fatal error, shutdown a reader..
Mar 13 2018, 4:56 AM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey
gniibe added a comment to T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows.

Thanks a lot for pointers and suggestion.
Well, the problem of Yubikey itself cannot be solved by others, we can put some workaround for the error recovery.
So, this is another try of mine to improve error recovery.

Mar 13 2018, 4:52 AM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey

Mar 12 2018

vovcacik added a comment to T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows.
  • There was same problem in yubico-piv-tool and it was solved by detecting error state (0x80100068) and reconnecting to the smart card if necessary [1]
  • There is also a thread in OpenSC discussing this issue [2] and relevant PRs [3]
  • I also found a project that claims to fix SCARD_W_RESET_CARD by disabling exclusive access to the card before asking for PIN (and then they enable exclusive access again) [4]
Mar 12 2018, 8:54 PM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey
gniibe added a comment to T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows.

Part of the problem is Yubikey side, I suppose. (Because my implementation of Gnuk Token has no problem for suspend/resume if it's in-use.)

Mar 12 2018, 1:24 AM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey
gniibe added a comment to T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows.

Again, thanks a lot for your testing. The log said: The code I added cannot detect the event of suspend/resume.
It seems that there is no way to recover from suspend/resume for Yubikey.

Mar 12 2018, 1:19 AM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey

Mar 9 2018

vovcacik added a comment to T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows.

Yeah, this is better, we got apdu_get_status => sw=0x0 status=7 and I can auth with this version as usual. After sleep-wake cycle it would however fail with pcsc_transmit failed: reset card (0x80100068). Logs attached.

Mar 9 2018, 7:09 PM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey
gniibe added a comment to T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows.

Thanks a lot for your testing. So, apparently, the PC/SC behavior is different between GNU/Linux and Windows.
Thus, I pushed another change: rG1e27c0e04cd3: scd: More fix with PC/SC for Windows.. Please test this. (Both of previous version and this version work well on GNU/Linux for operations not including suspend/resume with Yubikey and Gnuk Token, while my Yubikey with PC/SC doesn't work well for suspend/resume.)

Mar 9 2018, 2:02 AM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey
gniibe added a commit to T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows: rG1e27c0e04cd3: scd: More fix with PC/SC for Windows..
Mar 9 2018, 1:01 AM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey

Mar 8 2018

vovcacik added a comment to T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows.

Thanks, this version of scdaemon executes.

Mar 8 2018, 7:45 PM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey
gniibe added a comment to T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows.

Sorry, my build was not good even if it's for x86_64 (I used development version of libassuan, etc.).

Mar 8 2018, 6:07 AM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey

Mar 6 2018

vovcacik added a comment to T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows.

@gniibe it seems the patched scdaemon.exe is 64 bit executable and it requires libassuan6-0.dll. However I got installed 32 bit version of gpg that only has incompatible libassuan-0.dll. I scanned whole computer for the missing lib, skimmed your ftp for 64 bit binaries and looked into gpg4win installer to find it, but no luck. There is also libassuan github repo, but I would like to avoid building the dll myself; there would probably be more than one dll to build anyway.

Mar 6 2018, 9:44 AM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey
gniibe changed the visibility for T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows.
Mar 6 2018, 8:27 AM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey
gniibe triaged T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows as Normal priority.

If possible, please try with this (patched version of scdaemon):

Mar 6 2018, 8:25 AM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey
aheinecke edited projects for T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows, added: gpg4win; removed Windows 64.
Mar 6 2018, 7:53 AM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey
gniibe added a comment to T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows.

I realized that suspend/resume is not supported yet on GNU/Linux: https://anonscm.debian.org/cgit/pcsclite/PCSC.git/tree/TODO#n7
So, I can't test myself.
Here is an attempt to improve:


The reference is: https://stackoverflow.com/questions/11294638/how-to-use-scardgetstatuschange-correctly-on-windows-8

Mar 6 2018, 2:11 AM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey
gniibe added a comment to T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows.

It looks like SCardGetStatusChange doesn't return failure after wake up.
Here, what we need is catching the event of wake up, which requires reset of the card.
I think that we can check by the dwEventState field.
I'll try on GNU/Linux environment, then ask you to try.

Mar 6 2018, 12:41 AM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey

Mar 5 2018

vovcacik added a comment to T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows.

@werner there had to be some mix up, as the log snippet is not mine.

Mar 5 2018, 9:26 PM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey
werner added a comment to T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows.

This seems to be the relevant part of the log:

2017-11-18 07:45:15 scdaemon[8918] DBG: ccid-driver: CCID: card inactive/removed
2017-11-18 07:45:15 scdaemon[8918] ccid open error: skip
2017-11-18 07:45:15 scdaemon[8918] pcsc_establish_context failed: no service (0x8010001d)
2017-11-18 07:45:15 scdaemon[8918] DBG: ccid-driver: CCID: interrupt callback 0
2017-11-18 07:45:15 scdaemon[8918] DBG: ccid-driver: CCID: card removed
Mar 5 2018, 1:46 PM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey
vovcacik updated the task description for T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows.
Mar 5 2018, 11:22 AM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey
vovcacik changed the visibility for T3825: Scdaemon needs to restart after wake up from sleep mode for YubiKey to work on Windows.
Mar 5 2018, 11:17 AM · gpg4win, gpgagent, gnupg (gpg22), scd, Windows, Bug Report, yubikey

Apr 4 2017

gniibe claimed T2903: "gpg --card-status" does not add any entries to the private key ring.
Apr 4 2017, 3:13 AM · Info Needed, Bug Report, gnupg

Feb 14 2017

werner added a project to T2903: "gpg --card-status" does not add any entries to the private key ring: yubikey.
Feb 14 2017, 3:25 PM · Info Needed, Bug Report, gnupg