[pkg-gnupg-maint] Bug#919856: gpg-agent: agent refuses operation again

[Norbert Preining]

Package: gpg-agent
Version: 2.2.12-1
Severity: important

Hi all


some recent changes (not sure whether this is gpg, X, systemd, or some
other player like dbus) broke ssh functionality for gpg.

Whenever I try to connect somewhere, I get:
	sign_and_send_pubkey: signing failed: agent refused operation
(actually multiple times, once for my plugged in yubikey, once for my
ssh key in ~/.ssh).

ssh-add -l lists the keys.

systemctl --user lists:
dirmngr.socket                loaded active listening GnuPG network certificate
gpg-agent-browser.socket      loaded active running   GnuPG cryptographic agent
gpg-agent-extra.socket        loaded active running   GnuPG cryptographic agent
gpg-agent-ssh.socket          loaded active running   GnuPG cryptographic agent
gpg-agent.socket              loaded active running   GnuPG cryptographic agent


settings in my shell
GPG_AGENT_INFO=/run/user/1000/gnupg/S.gpg-agent:0:1
SSH_AUTH_SOCK=/run/user/1000/gnupg/S.gpg-agent.ssh

nothing specific in the .xsession-errors file.

Any suggestions how to debug this?

Thanks

Norbert


-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.20.3 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages gpg-agent depends on:
ii  gpgconf                     2.2.12-1
ii  libassuan0                  2.5.2-1
ii  libc6                       2.28-5
ii  libgcrypt20                 1.8.4-4
ii  libgpg-error0               1.33-3
ii  libnpth0                    1.6-1
ii  pinentry-gnome3 [pinentry]  1.1.0-1+b1
ii  pinentry-gtk2 [pinentry]    1.1.0-1+b1

Versions of packages gpg-agent recommends:
ii  gnupg  2.2.12-1

Versions of packages gpg-agent suggests:
ii  dbus-user-session  1.12.12-1
ii  libpam-systemd     240-4
ii  pinentry-gnome3    1.1.0-1+b1
ii  scdaemon           2.2.12-1

-- no debconf information