[pkg-gnupg-maint] Bug#854949: Bug#854949: gnupg-agent: "agent refused operation" with smartcard

Daniel Kahn Gillmor dkg at fifthhorseman.net
Mon Feb 13 15:57:23 UTC 2017


Hi Simon--

On Mon 2017-02-13 10:24:12 -0500, Simon Richter wrote:
> Either has the same behaviour. It seems to be related to passphrase
> entry, as the problem can be fixed with updatestartuptty, but that
> wasn't necessary before.

I'm surprised to hear that regular GnuPG access (non-ssh) has this
problem.  gpg is supposed to tell the agent what display to use when it
makes a query.

can i ask you to double-check this?  Is there a minimal series of steps
i can take to demonstrate the problem?

e.g.

 * log out completely
 * log in and ensure that no instance of gpg-agent or scdaemon is
   running
 * exec startx
 * open a terminal emulator
 * echo test | gpg -ear 9C43253495E4DCA837945F5BEBF67A846AABE354 | gpg -d

does that show the problem?

If you can, please upgrade to 2.1.18-5 (in unstable now) because it
includes some additional fixes for scdaemon.

> That session is started with "exec startx" from a tty. Window manager is
> ratpoison, no desktop environment is loaded.

I also use exec startx from a tty, with openbox as the window manager
and no desktop environment.  I have no problem with this prompting, so
i'm trying to narrow it down here.

I do have dbus-user-session installed, fwiw, and i use pinentry-gnome3,
but pinentry-gtk-2 also works for me.

thanks for helping to track this down,

       --dkg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 832 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnupg-maint/attachments/20170213/1b2835c0/attachment.sig>


More information about the pkg-gnupg-maint mailing list