Yubico Forum
https://forum.yubico.com/

OpenPGP and challengeresponse can't be used at the same time
https://forum.yubico.com/viewtopic.php?f=26&t=1204
Page 1 of 1

Author:  danieldaniel [ Wed Oct 16, 2013 10:36 pm ]
Post subject:  OpenPGP and challengeresponse can't be used at the same time

When I plug in my Yubikey, only one can be used at once. Here's what happens:

Challenge response works up until I try using the GPG applet.

Code:
Daniels-iMac:~ root# gpg --card-status
gpg: selecting openpgp failed: Card not present
gpg: OpenPGP card not available: Card not present
Daniels-iMac:~ root# gpg --card-status
<card data>


As you can see, it doesn't work once, but then it gives me the information about the card. However, once it works, it cannot do challenge response anymore.
Code:
debug: pam_yubico.c:561 (do_challenge_response): Challenge-response FAILED
debug: pam_yubico.c:680 (do_challenge_response): Yubikey core error: timeout
debug: pam_yubico.c:689 (do_challenge_response): Challenge response failed: Operation timed out


Any idea why this is happening / how I can fix it?

EDIT:
It seems as if challenge-response works again if I press the button on the Yubikey, but then I can't do GPG.

Author:  Tom [ Fri Oct 18, 2013 1:05 am ]
Post subject:  Re: OpenPGP and challengeresponse can't be used at the same

please check that you NEO is in mode 82.

ykinfo -a

Author:  danieldaniel [ Fri Oct 18, 2013 1:14 am ]
Post subject:  Re: OpenPGP and challengeresponse can't be used at the same

Tom wrote:
please check that you NEO is in mode 82.

ykinfo -a


It was, and I just set it again to double check. Still doesn't work.

Also, ykinfo -a didn't show the mode. I just set it with ykpersonalize.

Thanks for the response!

Author:  Tom [ Fri Oct 18, 2013 10:11 pm ]
Post subject:  Re: OpenPGP and challengeresponse can't be used at the same

Do you have this installed?
https://github.com/Yubico/yubikey-perso ... r/ykinfo.1

This commands will show information about the NEO and it has to works.

Author:  danieldaniel [ Fri Oct 18, 2013 10:45 pm ]
Post subject:  Re: OpenPGP and challengeresponse can't be used at the same

Tom wrote:
Do you have this installed?
https://github.com/Yubico/yubikey-perso ... r/ykinfo.1

This commands will show information about the NEO and it has to works.

I have it installed, and it shows information. It just doesn't show the mode. See http://grab.by/rhYS.

Author:  vicks [ Wed Nov 06, 2013 4:50 pm ]
Post subject:  Re: OpenPGP and challengeresponse can't be used at the same

I also have the same problem. I need to be able to use both OpenPGP and challenge-response at the same time so this is a bit of a bummer.

Best regards,

vicks

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/