Yubico Forum

Re: [SOLVED] Resetting the opengpg applet fails - ERR 671089

2015-09-28T21:12:23+01:00

Solved by getting a new YubiKey. Since gpg-connect-agent and gpg2 are working now out-of-the-box (without changing anything on the PC) it seems that the old YubiKey was faulty from the beginning.

Statistics: Posted by owl102 — Mon Sep 28, 2015 9:12 pm

Re: Resetting the opengpg applet fails - ERR 67108983

2015-09-18T22:20:23+01:00

Addendum:

I tried to figure out why "gpg --card-status" works fine and "gpg2 --card-status" don't. I guess that gpg-agent is not working properly here.

However, suddenly "gpg --card-status" does not work anymore, without actually changing anything on the YubiKey itself:

Code:

[xxx@yyy ~]$ ykinfo -v
Yubikey core error: no yubikey present
[xxx@yyy ~]$$ yubico-piv-tool -a status
Failed to connect to reader.
[xxx@yyy ~]$ gpg --card-status
gpg: detected reader `Yubico Yubikey NEO CCID 00 00'
gpg: apdu_send_simple(0) failed: no card
Legen Sie die Karte ein und drücken Sie 'Eingabe'; drücken Sie 'c' um abzubrechen:

Rebooting the PC does not make a difference.

So it seems that this YubiKey needs service?

Statistics: Posted by owl102 — Fri Sep 18, 2015 10:20 pm

[SOLVED] Resetting the opengpg applet fails - ERR 67108983

2015-09-28T21:10:02+01:00

Since I felt into the same trap as viewtopic.php?f=26&t=1520 my openpgp Admin PIN is locked. So I try to follow the instructions for resetting the applet which could be find here: https://developers.yubico.com/ykneo-ope ... pplet.html

Unfortunately I don't get very far with it:

Code:

$gpg --version
gpg (GnuPG) 1.4.19
...
$gpg2 --version
gpg (GnuPG) 2.1.7
libgcrypt 1.6.4
...
$ gpg-connect-agent --hex "scd apdu 00 f1 00 00" /bye
gpg-connect-agent: Kein aktiver gpg-agent - `/usr/bin/gpg-agent' wird gestartet
gpg-connect-agent: Warte bis der gpg-agent bereit ist ... (5s)
gpg-connect-agent: Verbindung zum gpg-agent aufgebaut
ERR 67108983 Kein Karten-Daemon 

(The same happens when tried as root instead of ordinary user)

Beside this the YubiKey works fine, i.e. no problems with yubico-piv-tool, the yubikey-personalization-gui, gpg --card-status, and so on.

Here is the output of "gpg --card-status":

Code:

gpg --card-status
Application ID ...: D2760001240102000006036381860000
Version ..........: 2.0
Manufacturer .....: unknown
Serial number ....: 03638186
Name of cardholder: [nicht gesetzt]
Language prefs ...: [nicht gesetzt]
Sex ..............: unbestimmt
URL of public key : [nicht gesetzt]
Login data .......: [nicht gesetzt]
Signature PIN ....: zwingend
Key attributes ...: 2048R 2048R 2048R
Max. PIN lengths .: 127 127 127
PIN retry counter : 3 3 0
Signature counter : 0
Signature key ....: [none]
Encryption key....: [none]
Authentication key: [none]
General key info..: [none]

BTW: "gpg2 --card-status does not work, the response is "gpg: OpenPGP Karte ist nicht vorhanden: Kein Karten-Daemon"

But the smart card daemon is up and running:

Code:

# systemctl status pcscd
● pcscd.service - PC/SC Smart Card Daemon
   Loaded: loaded (/usr/lib/systemd/system/pcscd.service; indirect; vendor preset: disabled)
   Active: active (running) since Fr 2015-09-18 22:44:48 CEST; 1s ago
 Main PID: 3230 (pcscd)
   CGroup: /system.slice/pcscd.service
           └─3230 /usr/sbin/pcscd --foreground --auto-exit

OS is Fedora 23.

Any idea what goes wrong here?

Statistics: Posted by owl102 — Fri Sep 18, 2015 9:22 pm