[pkg-gnupg-maint] Bug#854595: scdaemon: Yubikey smartcards (maybe others) are not recognized after update from 2.1.17-4 to 2.1.18-4
Camille MONCELIER
cmoncelier at sii.fr
Wed Feb 8 14:30:34 UTC 2017
Package: scdaemon
Version: 2.1.17-4
Severity: normal
Dear Maintainer,
After updating gnupg2 to 2.1.18-4, I'm unable to use my gpg keys stored on a
Yubikey.
I can easily reproduce the problem like this:
$ sudo dpkg -i /var/cache/apt/archives/*_2.1.18-4_*
[.... snip ....]
Setting up gnupg2 (2.1.18-4) ...
$ sudo pkill gpg-agent
$ gpg2 --card-edit
gpg: selecting openpgp failed: No such device
gpg: OpenPGP card not available: No such device
$ sudo dpkg -i /var/cache/apt/archives/*_2.1.17-4_*.deb
[.... snip ....]
Setting up gnupg2 (2.1.17-4) ...
$ sudo pkill gpg-agent
[pix:~] % gpg2 --card-edit
Reader ...........: Yubico Yubikey NEO U2F CCID 00 00
Application ID ...: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
Version ..........: 2.0
Manufacturer .....: Yubico
Serial number ....: XXXXXXXX
Here is the logfile from scdaemon:
2017-02-08 15:17:23 scdaemon[11566] SIGTERM received - still 0 running
threads
2017-02-08 15:17:23 scdaemon[11566] scdaemon (GnuPG) 2.1.18 stopped
2017-02-08 15:17:24 scdaemon[11764] listening on socket
'/run/user/1000/gnupg/S.scdaemon'
2017-02-08 15:17:24 scdaemon[11764] handler for fd -1 started
2017-02-08 15:17:24 scdaemon[11764] DBG: chan_5 -> OK GNU Privacy Guard's
Smartcard server ready
2017-02-08 15:17:24 scdaemon[11764] DBG: chan_5 <- GETINFO socket_name
2017-02-08 15:17:24 scdaemon[11764] DBG: chan_5 -> D
/run/user/1000/gnupg/S.scdaemon
2017-02-08 15:17:24 scdaemon[11764] DBG: chan_5 -> OK
2017-02-08 15:17:24 scdaemon[11764] DBG: chan_5 <- OPTION event-signal=12
2017-02-08 15:17:24 scdaemon[11764] DBG: chan_5 -> OK
2017-02-08 15:17:24 scdaemon[11764] DBG: chan_5 <- GETINFO version
2017-02-08 15:17:24 scdaemon[11764] DBG: chan_5 -> D 2.1.18
2017-02-08 15:17:24 scdaemon[11764] DBG: chan_5 -> OK
2017-02-08 15:17:24 scdaemon[11764] DBG: chan_5 <- SERIALNO openpgp
2017-02-08 15:17:24 scdaemon[11764] DBG: apdu_open_reader: BAI=10901
2017-02-08 15:17:24 scdaemon[11764] DBG: apdu_open_reader: new device=10901
2017-02-08 15:17:24 scdaemon[11764] ccid open error: skip
2017-02-08 15:17:24 scdaemon[11764] DBG: chan_5 -> ERR 100696144 No such
device
<SCD>
2017-02-08 15:17:25 scdaemon[11764] DBG: chan_5 <- RESTART
2017-02-08 15:17:25 scdaemon[11764] DBG: chan_5 -> OK
Have a nice day !
C.M.
-- System Information:
Debian Release: 9.0
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.9.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages scdaemon depends on:
ii gnupg-agent 2.1.17-4
ii libassuan0 2.4.3-2
ii libc6 2.24-9
ii libgcrypt20 1.7.6-1
ii libgpg-error0 1.26-2
ii libksba8 1.3.5-2
ii libnpth0 1.3-1
ii libusb-1.0-0 2:1.0.21-1
scdaemon recommends no packages.
scdaemon suggests no packages.
-- no debconf information
--
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
<title></title>
</head>
<body bgcolor="#FFFFFF" text="#000000">
<style>
td,div,a {
font-family: Calibri,Candara,Segoe,'Segoe UI',sans-serif; font-size:
12px;
color: #000;
}
a, a:hover, a:visited, .imp {
color: #035ba0;
}
</style>
<div>
<br>
<br>
<br>
<br>
<br>
<br>
</div>
<table style="vertical-align: top; " border="0" width="425"
cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td>
<table>
<tbody>
<tr>
<td><img alt="Face"
src="file:///home/pix/Work/2016/00%20-%20Administratif/2016-02-12%20-%20Signature%20eMail/face.png"
dfsrc="doc:Briefcase/unnamed.png" height="48"
width="48"></td>
<td>
<div class="imp" style="font-size: 150%;">Camille
MONCELIER</div>
<div class="imp" style="font-size: 120%;">Expert SSI
<br>
Sécurité du Numérique</div>
</td>
</tr>
</tbody>
</table>
</td>
<td>
<table>
<tbody>
<tr>
<td>Tel:</td>
<td><a style="color: #035ba0"
href="tel:+33-2-99-12-11-23">+33 2 99 12 11 23</a></td>
</tr>
<tr>
<td>Mobile:</td>
<td><a style="color: #035ba0"
href="tel:+33-6-33-37-88-82">+33 6 33 37 88 82</a></td>
</tr>
<tr>
<td>@:</td>
<td><a style="color: #035ba0"
href="mailto:cmoncelier at sii.fr">cmoncelier at sii.fr</a></td>
</tr>
<tr>
<td>Twitter:</td>
<td><a style="color: #035ba0"
href="https://twitter.com/pix">@pix</a></td>
</tr>
</tbody>
</table>
</td>
</tr>
<tr>
<td style="padding: 10px 0 10px;" colspan="2">GPG Fingerprint
: <a style="color: #035ba0"
href="https://keybase.io/pixdamix">50FB A39B D491 3B76
18A1 E0FD 8F47 DEDB 094A E1EA</a></td>
</tr>
<tr>
<td colspan="2"><img alt="SII"
src="file:///home/pix/Work/2016/00%20-%20Administratif/2016-02-12%20-%20Signature%20eMail/SII-Signature-mail-rennes.jpg"
dfsrc="doc:Briefcase/SII-Signature-mail-rennes.jpg"
height="81" width="425"></td>
</tr>
</tbody>
</table>
</body>
</html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnupg-maint/attachments/20170208/9a2b5a97/attachment.sig>
More information about the pkg-gnupg-maint
mailing list