Yubico Forum
https://forum.yubico.com/

OpenPGP applet failed
https://forum.yubico.com/viewtopic.php?f=26&t=1029
Page 1 of 1

Author:  drazvan [ Mon Apr 08, 2013 3:54 pm ]
Post subject:  OpenPGP applet failed

Hello,

I am trying to follow your blog post to enable the OpenPGP JavaCard applet inside my Neo. However, the key generation procedure fails, see below. I'm not sure what to do next. Please advise.

Thank you,
Razvan

Code:
C:\Users\Razvan Dragomirescu\Downloads\ykpers\bin>ykpersonalize -m82
Firmware version 3.1.2 Touch level 1541 Program sequence 1

The USB mode will be set to: 0x82

Commit? (y/n) [n]: y

C:\Users\Razvan Dragomirescu\Downloads\ykpers\bin>"C:\Program Files (x86)\GNU\Gn
uPG\gpg2" --card-edit

Application ID ...: D2760001240102000000000000010000
Version ..........: 2.0
Manufacturer .....: test card
Serial number ....: 00000001
Name of cardholder: [not set]
Language prefs ...: [not set]
Sex ..............: unspecified
URL of public key : [not set]
Login data .......: [not set]
Signature PIN ....: forced
Key attributes ...: 2048R 2048R 2048R
Max. PIN lengths .: 127 127 127
PIN retry counter : 3 3 3
Signature counter : 0
Signature key ....: 3A03 E289 8A25 2C30 FD53  8404 9605 2421 B7DF 3A06
      created ....: 2013-04-08 14:39:59
Encryption key....: [none]
Authentication key: [none]
General key info..: [none]

gpg/card> admin
Admin commands are allowed

gpg/card> generate

gpg: NOTE: keys are already stored on the card!

Replace existing keys? (y/N) y

Please note that the factory settings of the PINs are
   PIN = `123456'     Admin PIN = `12345678'
You should change them using the command --change-pin

Please specify how long the key should be valid.
         0 = key does not expire
      <n>  = key expires in n days
      <n>w = key expires in n weeks
      <n>m = key expires in n months
      <n>y = key expires in n years
Key is valid for? (0) 1y
Key expires at 04/08/14 17:45:48 GTB Daylight Time
Is this correct? (y/N) y

GnuPG needs to construct a user ID to identify your key.

Real name: Razvan Dragomirescu
Email address: razvan.dragomirescu@gmail.com
Comment: Test Key
You selected this USER-ID:
    "Razvan Dragomirescu (Test Key) <razvan.dragomirescu@gmail.com>"

Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? O
gpg: signing failed: General error
gpg: make_keysig_packet failed: General error
Key generation failed: General error

gpg/card>

Author:  drazvan [ Mon Apr 08, 2013 6:35 pm ]
Post subject:  Re: OpenPGP applet failed

BTW, this appears to be a Windows problem (I'm running Windows 7 64-bit). I've just tried it again on Ubuntu 12.04 and it works perfectly fine, the keys are generated properly, etc. Here's the dump from Ubuntu:

Code:
root@razubuntu:~# gpg --card-edit

Application ID ...: D2760001240102000000000000010000
Version ..........: 2.0
Manufacturer .....: test card
Serial number ....: 00000001
Name of cardholder: [not set]
Language prefs ...: [not set]
Sex ..............: unspecified
URL of public key : [not set]
Login data .......: [not set]
Signature PIN ....: forced
Key attributes ...: 2048R 2048R 2048R
Max. PIN lengths .: 127 127 127
PIN retry counter : 3 3 3
Signature counter : 1
Signature key ....: 1023 B45B C60F E018 E2BD  CD35 1B65 1325 FF26 A9CB
      created ....: 2013-04-08 17:25:43
Encryption key....: [none]
Authentication key: [none]
General key info..: [none]

gpg/card> admin
Admin commands are allowed

gpg/card> generate

gpg: NOTE: keys are already stored on the card!

Replace existing keys? (y/N) y

Please note that the factory settings of the PINs are
   PIN = `123456'     Admin PIN = `12345678'
You should change them using the command --change-pin

gpg: gpg-agent is not available in this session
gpg: 3 Admin PIN attempts remaining before card is permanently locked

Please enter the Admin PIN
                 
Please enter the PIN
Please specify how long the key should be valid.
         0 = key does not expire
      <n>  = key expires in n days
      <n>w = key expires in n weeks
      <n>m = key expires in n months
      <n>y = key expires in n years
Key is valid for? (0)
Key does not expire at all
Is this correct? (y/N) y

You need a user ID to identify your key; the software constructs the user ID
from the Real Name, Comment and Email Address in this form:
    "Heinrich Heine (Der Dichter) <heinrichh@duesseldorf.de>"

Real name: Razvan Dragomirescu
Email address: razvan.dragomirescu@gmail.com
Comment:
You selected this USER-ID:
    "Razvan Dragomirescu <razvan.dragomirescu@gmail.com>"

Change (N)ame, (C)omment, (E)mail or (O)kay/(Q)uit? o
gpg: existing key will be replaced
gpg: please wait while key is being generated ...
gpg: key generation completed (19 seconds)
gpg: signatures created so far: 0
gpg: generating new key
gpg: please wait while key is being generated ...
gpg: key generation completed (33 seconds)
gpg: signatures created so far: 1
gpg: signatures created so far: 2
gpg: generating new key
gpg: please wait while key is being generated ...
gpg: key generation completed (24 seconds)
gpg: signatures created so far: 3
gpg: signatures created so far: 4
gpg: /root/.gnupg/trustdb.gpg: trustdb created
gpg: key 690956B8 marked as ultimately trusted
public and secret key created and signed.

gpg: checking the trustdb
gpg: 3 marginal(s) needed, 1 complete(s) needed, PGP trust model
gpg: depth: 0  valid:   1  signed:   0  trust: 0-, 0q, 0n, 0m, 0f, 1u
pub   2048R/690956B8 2013-04-08
      Key fingerprint = 7EA9 5CC8 F988 80AF CEEA  CBD8 C73C 8BE2 6909 56B8
uid                  Razvan Dragomirescu <razvan.dragomirescu@gmail.com>
sub   2048R/CBF95AE0 2013-04-08
sub   2048R/C7B78E8E 2013-04-08

Author:  bthomson [ Sat Apr 20, 2013 10:42 pm ]
Post subject:  Re: OpenPGP applet failed

I got the same problem in Windows 7.

Oh well, I guess I will try Ubuntu.

Author:  Tom [ Fri May 24, 2013 9:57 am ]
Post subject:  Re: OpenPGP applet failed

Please read your private message

Page 1 of 1 All times are UTC + 1 hour
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/