Yubico Forum

Re: macOS 10.12.3 update breaks GnuPG compatability?

2017-02-15T19:38:48+01:00

Awesome, and glad to hear there's both a good workaround and a potential source to look at to solve it. I'll try configuring Homebrew to compile out libusb and see if that permanently implements the fix.

Statistics: Posted by castillar — Wed Feb 15, 2017 7:38 pm

Re: macOS 10.12.3 update breaks GnuPG compatability?

2017-02-14T12:55:37+01:00

I don't think macOS 10.12.3 is the problem. I was running GnuPG 2.1.6 without problems on macOS 10.12.3. The upgrade to GnuPG 2.1.8 broke things for me.

As mentioned in another thread, compiling GnuPG 2.1.8 --without-libusb fixed the problem for me. I think the ``disable-ccid`` in castillar's configuration file might be what fixes it for you two, since that stops scdaemon from using libusb (as far as I can tell).

Just tried this: installed the binary gnupg21 from homebrew (with libusb support). Without ``disable-ccid``in my scdaemon.conf: no worky. Adding ``disable-ccid`` to my scdaemon.conf: works. The presence of ``pcsc-driver /System/Library/Frameworks/PCSC.framework/PCSC`` doesn't make any difference.

Statistics: Posted by trouble — Tue Feb 14, 2017 12:55 pm

Re: macOS 10.12.3 update breaks GnuPG compatability?

2017-02-14T06:37:09+01:00

Add your scdaemon.conf contents fixed it for me! I think it was the PCSC reference that I needed.

Statistics: Posted by jwiegley — Tue Feb 14, 2017 6:37 am

Re: macOS 10.12.3 update breaks GnuPG compatability?

2017-02-14T06:29:52+01:00

Rats. Well, it was worth a shot. I'm using the same version of GnuPG (2.1.18, from homebrew). FWIW, here's my scdaemon.conf file, but if stopping/starting isn't generating anything, I doubt that's it.

Code:

pcsc-driver /System/Library/Frameworks/PCSC.framework/PCSC
card-timeout 1
disable-ccid
log-file /scdaemon.log.txt
verbose
debug-level guru

( is the path to my home directory)

Statistics: Posted by castillar — Tue Feb 14, 2017 6:29 am

Re: macOS 10.12.3 update breaks GnuPG compatability?

2017-02-13T21:28:55+01:00

I'm using these versions:

scdaemon (GnuPG) 2.1.18
libgcrypt 1.7.6
libksba 1.3.5

I do have `scdaemon --multi-server` running. Starting or stopping it, running it manually, does not change the situation.

I have no scdaemon.conf file.

John

Statistics: Posted by jwiegley — Mon Feb 13, 2017 9:28 pm

Re: macOS 10.12.3 update breaks GnuPG compatability?

2017-02-13T20:10:34+01:00

I've had a similar issue suddenly that I think I may have resolved! A couple questions for you:

What version of GnuPG are you using?
If you look in the process table, is there an scdaemon process running?
What does your scdaemon.conf file look like?

With my installation, I discovered that if I manually ran /usr/local/Cellar/gnupg21/2.1.18/libexec/scdaemon, I suddenly had an scdaemon process, and GnuPG began behaving itself. That may or may not be related to your problem, but it at least might generate some useful debugging information to help suss out where the issue is.

Statistics: Posted by castillar — Mon Feb 13, 2017 8:10 pm

macOS 10.12.3 update breaks GnuPG compatability?

2017-02-09T18:38:21+01:00

Hello,

I use my Yubikey 4 with GnuPG. With 10.12.2 it works perfectly. However, 10.12.3 makes the card invisible to GnuPG. That is, gpg2 --card-status reports that no card is available, even though system profiler reports that the card is present, OTP works, etc. I'm not even sure what it is that was broken by this update, but I thought I'd let people here know.

Thanks,
John

Statistics: Posted by jwiegley — Thu Feb 09, 2017 6:38 pm