Yubico Forum
https://forum.yubico.com/

[solved] GPA finds YK4 but gpg --card-status throws error
https://forum.yubico.com/viewtopic.php?f=35&t=2298
Page 1 of 1

Author:  T4cC0re [ Tue May 03, 2016 11:21 pm ]
Post subject:  [solved] GPA finds YK4 but gpg --card-status throws error

Hi,

I just bought my 3rd Yubikey, the YK4, (neo and standard before that) and set it up on my Arch Linux machine. All no problemo, Now here's my problem:

When I use the GPA to access my YK4 on Windows 10 (dev machine, need git signing, hence cli tools) it all works flawless (get shown all details and can edit them), however `gpg --card-status --verbose` gives me this output:
Quote:
C:\Users\t4cc0>gpg --card-status --verbose
gpg: detected reader `Yubico Yubikey 4 OTP+U2F+CCID 0'
gpg: reader slot 0: not connected
gpg: reader slot 0: active protocol: T1
gpg: slot 0: ATR=3B F8 13 00 00 81 31 FE 15 59 75 62 69 6B 65 79 34 D4
gpg: pcsc_transmit failed: invalid parameter (0x80100004)
gpg: apdu_send_simple(0) failed: invalid value
Please insert the card and hit return or enter 'c' to cancel: c
gpg: selecting openpgp failed: invalid argument
gpg: OpenPGP card not available: general error


GPA: Image

Using the same yk and the same command on Arch works perfect.

I have already tried removing all drivers fro the device manager and installing newer USB drivers. Anything I missed in the setup guide? I am really at the end of my ideas and googleing the error also did not result in any solutions.

Update: Just tried this, without success, but a different error:
Quote:
PS C:\Users\t4cc0> gpg-connect-agent.exe /bye
PS C:\Users\t4cc0> gpg --card-status --verbose
gpg: detected reader `Yubico Yubikey 4 OTP+U2F+CCID 0'
gpg: reader slot 0: not connected
gpg: pcsc_connect failed: sharing violation (0x8010000b)
gpg: reader slot 0: not connected
gpg: apdu_send_simple(0) failed: locking failed
Please insert the card and hit return or enter 'c' to cancel: c
gpg: selecting openpgp failed: general error
gpg: OpenPGP card not available: general error

Author:  ChrisHalos [ Tue May 03, 2016 11:56 pm ]
Post subject:  Re: GPA finds YK4 but gpg --card-status throws error

Have you tried ending the two GnuPG processes running in Task Manager and removing and reinserting the YubiKey?

Author:  T4cC0re [ Wed May 04, 2016 12:21 am ]
Post subject:  Re: GPA finds YK4 but gpg --card-status throws error

ChrisHalos wrote:
Have you tried ending the two GnuPG processes running in Task Manager and removing and reinserting the YubiKey?


Yes, i get the same errors.

Author:  T4cC0re [ Sat May 07, 2016 4:01 am ]
Post subject:  Re: GPA finds YK4 but gpg --card-status throws error

Okay, I got it (partially) working!

Solution was rather simple after digging into GPG-Configs on linux:

Set environment variables:
GNUPGHOME=%APPDATA%\gnupg

and use gpg2. That's it. Because if that variable is not set it will look in the wrong folder.
Need to start GPA once and then it's all okay :)

Still need to get git-bash's ssh working though, so I leave this thread open a little longer

Author:  ChrisHalos [ Tue May 10, 2016 9:15 pm ]
Post subject:  Re: GPA finds YK4 but gpg --card-status throws error

Did you have any luck with git-bash ssh?

Author:  T4cC0re [ Wed May 11, 2016 11:04 am ]
Post subject:  Re: GPA finds YK4 but gpg --card-status throws error

Not, yet. And I cannot seem to find out why :/

Do you have any idea i could try?

Update:

Found the solution: Configure the GPG-Agent to start with --enable-putty-support and then run
Code:
eval $(ssh-pageant -r -a "/tmp/.ssh-pageant-$USERNAME")

from the git-bash and everything works!

/closed

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/