Yubico Forum
https://forum.yubico.com/

Unable to use gpg --card-edit or similar on Yosemite
https://forum.yubico.com/viewtopic.php?f=26&t=1410
Page 1 of 1

Author:  ericlanderson [ Sat Jun 28, 2014 1:37 am ]
Post subject:  Unable to use gpg --card-edit or similar on Yosemite

I am seeking support from the yubico team as they are in the best position to debug the issue and get help from apple.

Upon using anything on OS X 10.10 that uses PCSC (such as gpg --card-edit) fails to work and hangs indefinitely.

The OS X logs begin to flood with:

Code:
6/22/14 9:30:51.804 AM pcsc-wrapper[2153]: pcsc-wrapper(2153,0xa07241d0) malloc: *** mach_vm_map(size=3221221376) failed (error code=3)
*** error: can't allocate region
*** set a breakpoint in malloc_error_break to debug


Even after Ctrl-C gpg, this continues to happen. Everything worked fine prior to upgrading to Yosemite.

Unfortunately, Apple doesn't release the code of their PCSC open source until after the GA, so I cannot chase down whats happening inside their library at this time.

I have filed issue 17410860 with Apple and suggested that they reach out to Yubico for a key that is known to work for debugging on their own.

Any other advice?

Author:  harningt [ Wed Jul 02, 2014 9:08 pm ]
Post subject:  Re: Unable to use gpg --card-edit or similar on Yosemite

Wow, bad news that someone's trying to malloc 3221221376 bytes (~3 GB of memory)...

Since my day job involves maintaining software for OSX related to smart cards, looks like I'll run into this issue soon... would see about getting a look-see earlier and loading up a debugger on tools using PC/SC to see if it's libpcsclite or something else raising it.

Author:  ericlanderson [ Tue Jul 22, 2014 2:24 pm ]
Post subject:  Re: Unable to use gpg --card-edit or similar on Yosemite

This appears resolved in beta 4

Author:  STRML [ Mon Nov 10, 2014 12:49 pm ]
Post subject:  Re: Unable to use gpg --card-edit or similar on Yosemite

This appears to still be a problem in the released Yosemite.

After a few hours, one sees this in the logs:

Code:
11/10/14 11:36:16.281 AM com.apple.SecurityServer[59]: token in reader Yubico Yubikey NEO OTP+CCID cannot be used (error 229)


This has been reported in a few places, to GPGTools on Twitter (https://twitter.com/GPGTools/status/525338650922713088) and on their issue tracker (http://support.gpgtools.org/discussions ... er-working). It may not be their issue, however - it seems to lurk in the closed-source SecurityServer impl.

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/