Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 2:02 pm

All times are UTC + 1 hour




Post new topic Reply to topic  [ 4 posts ] 
Author Message
 Post subject: OpenPGP applet failed
PostPosted: Mon Apr 08, 2013 3:54 pm 
Offline

Joined: Mon Apr 08, 2013 3:50 pm
Posts: 15
Hello,

I am trying to follow your blog post to enable the OpenPGP JavaCard applet inside my Neo. However, the key generation procedure fails, see below. I'm not sure what to do next. Please advise.

Thank you,
Razvan

Code:
C:\Users\Razvan Dragomirescu\Downloads\ykpers\bin>ykpersonalize -m82
Firmware version 3.1.2 Touch level 1541 Program sequence 1

The USB mode will be set to: 0x82

Commit? (y/n) [n]: y

C:\Users\Razvan Dragomirescu\Downloads\ykpers\bin>"C:\Program Files (x86)\GNU\Gn
uPG\gpg2" --card-edit

Application ID ...: D2760001240102000000000000010000
Version ..........: 2.0
Manufacturer .....: test card
Serial number ....: 00000001
Name of cardholder: [not set]
Language prefs ...: [not set]
Sex ..............: unspecified
URL of public key : [not set]
Login data .......: [not set]
Signature PIN ....: forced
Key attributes ...: 2048R 2048R 2048R
Max. PIN lengths .: 127 127 127
PIN retry counter : 3 3 3
Signature counter : 0
Signature key ....: 3A03 E289 8A25 2C30 FD53  8404 9605 2421 B7DF 3A06
      created ....: 2013-04-08 14:39:59
Encryption key....: [none]
Authentication key: [none]
General key info..: [none]

gpg/card> admin
Admin commands are allowed

gpg/card> generate

gpg: NOTE: keys are already stored on the card!

Replace existing keys? (y/N) y

Please note that the factory settings of the PINs are
   PIN = `123456'     Admin PIN = `12345678'
You should change them using the command --change-pin

Please specify how long the key should be valid.
         0 = key does not expire
      <n>  = key expires in n days
      <n>w = key expires in n weeks
      <n>m = key expires in n months
      <n>y = key expires in n years
Key is valid for? (0) 1y
Key expires at 04/08/14 17:45:48 GTB Daylight Time
Is this correct? (y/N) y

GnuPG needs to construct a user ID to identify your key.

Real name: Razvan Dragomirescu
Email address: razvan.dragomirescu@gmail.com
Comment: Test Key
You selected this USER-ID:
    "Razvan Dragomirescu (Test Key) <razvan.dragomirescu@gmail.com>"

Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? O
gpg: signing failed: General error
gpg: make_keysig_packet failed: General error
Key generation failed: General error

gpg/card>


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Mon Apr 08, 2013 6:35 pm 
Offline

Joined: Mon Apr 08, 2013 3:50 pm
Posts: 15
BTW, this appears to be a Windows problem (I'm running Windows 7 64-bit). I've just tried it again on Ubuntu 12.04 and it works perfectly fine, the keys are generated properly, etc. Here's the dump from Ubuntu:

Code:
root@razubuntu:~# gpg --card-edit

Application ID ...: D2760001240102000000000000010000
Version ..........: 2.0
Manufacturer .....: test card
Serial number ....: 00000001
Name of cardholder: [not set]
Language prefs ...: [not set]
Sex ..............: unspecified
URL of public key : [not set]
Login data .......: [not set]
Signature PIN ....: forced
Key attributes ...: 2048R 2048R 2048R
Max. PIN lengths .: 127 127 127
PIN retry counter : 3 3 3
Signature counter : 1
Signature key ....: 1023 B45B C60F E018 E2BD  CD35 1B65 1325 FF26 A9CB
      created ....: 2013-04-08 17:25:43
Encryption key....: [none]
Authentication key: [none]
General key info..: [none]

gpg/card> admin
Admin commands are allowed

gpg/card> generate

gpg: NOTE: keys are already stored on the card!

Replace existing keys? (y/N) y

Please note that the factory settings of the PINs are
   PIN = `123456'     Admin PIN = `12345678'
You should change them using the command --change-pin

gpg: gpg-agent is not available in this session
gpg: 3 Admin PIN attempts remaining before card is permanently locked

Please enter the Admin PIN
                 
Please enter the PIN
Please specify how long the key should be valid.
         0 = key does not expire
      <n>  = key expires in n days
      <n>w = key expires in n weeks
      <n>m = key expires in n months
      <n>y = key expires in n years
Key is valid for? (0)
Key does not expire at all
Is this correct? (y/N) y

You need a user ID to identify your key; the software constructs the user ID
from the Real Name, Comment and Email Address in this form:
    "Heinrich Heine (Der Dichter) <heinrichh@duesseldorf.de>"

Real name: Razvan Dragomirescu
Email address: razvan.dragomirescu@gmail.com
Comment:
You selected this USER-ID:
    "Razvan Dragomirescu <razvan.dragomirescu@gmail.com>"

Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? o
gpg: existing key will be replaced
gpg: please wait while key is being generated ...
gpg: key generation completed (19 seconds)
gpg: signatures created so far: 0
gpg: generating new key
gpg: please wait while key is being generated ...
gpg: key generation completed (33 seconds)
gpg: signatures created so far: 1
gpg: signatures created so far: 2
gpg: generating new key
gpg: please wait while key is being generated ...
gpg: key generation completed (24 seconds)
gpg: signatures created so far: 3
gpg: signatures created so far: 4
gpg: /root/.gnupg/trustdb.gpg: trustdb created
gpg: key 690956B8 marked as ultimately trusted
public and secret key created and signed.

gpg: checking the trustdb
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
pub   2048R/690956B8 2013-04-08
      Key fingerprint = 7EA9 5CC8 F988 80AF CEEA  CBD8 C73C 8BE2 6909 56B8
uid                  Razvan Dragomirescu <razvan.dragomirescu@gmail.com>
sub   2048R/CBF95AE0 2013-04-08
sub   2048R/C7B78E8E 2013-04-08


Top
 Profile  
Reply with quote  
PostPosted: Sat Apr 20, 2013 10:42 pm 
Offline

Joined: Sat Apr 20, 2013 10:40 pm
Posts: 1
I got the same problem in Windows 7.

Oh well, I guess I will try Ubuntu.


Top
 Profile  
Reply with quote  
PostPosted: Fri May 24, 2013 9:57 am 
Offline
Site Admin
Site Admin

Joined: Wed Nov 14, 2012 2:59 pm
Posts: 666
Please read your private message

_________________
-Tom


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 4 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: Heise IT-Markt [Crawler] and 8 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group