Yubico Forum https://forum.yubico.com/ |
|
[SOLVED] Resetting the opengpg applet fails - ERR 67108983 https://forum.yubico.com/viewtopic.php?f=26&t=2037 |
Page 1 of 1 |
Author: | owl102 [ Fri Sep 18, 2015 9:22 pm ] |
Post subject: | [SOLVED] Resetting the opengpg applet fails - ERR 67108983 |
Since I felt into the same trap as viewtopic.php?f=26&t=1520 my openpgp Admin PIN is locked. So I try to follow the instructions for resetting the applet which could be find here: https://developers.yubico.com/ykneo-ope ... pplet.html Unfortunately I don't get very far with it: Code: $gpg --version gpg (GnuPG) 1.4.19 ... $gpg2 --version gpg (GnuPG) 2.1.7 libgcrypt 1.6.4 ... $ gpg-connect-agent --hex "scd apdu 00 f1 00 00" /bye gpg-connect-agent: Kein aktiver gpg-agent - `/usr/bin/gpg-agent' wird gestartet gpg-connect-agent: Warte bis der gpg-agent bereit ist ... (5s) gpg-connect-agent: Verbindung zum gpg-agent aufgebaut ERR 67108983 Kein Karten-Daemon <GPG Agent> (The same happens when tried as root instead of ordinary user) Beside this the YubiKey works fine, i.e. no problems with yubico-piv-tool, the yubikey-personalization-gui, gpg --card-status, and so on. Here is the output of "gpg --card-status": Code: gpg --card-status Application ID ...: D2760001240102000006036381860000 Version ..........: 2.0 Manufacturer .....: unknown Serial number ....: 03638186 Name of cardholder: [nicht gesetzt] Language prefs ...: [nicht gesetzt] Sex ..............: unbestimmt URL of public key : [nicht gesetzt] Login data .......: [nicht gesetzt] Signature PIN ....: zwingend Key attributes ...: 2048R 2048R 2048R Max. PIN lengths .: 127 127 127 PIN retry counter : 3 3 0 Signature counter : 0 Signature key ....: [none] Encryption key....: [none] Authentication key: [none] General key info..: [none] BTW: "gpg2 --card-status does not work, the response is "gpg: OpenPGP Karte ist nicht vorhanden: Kein Karten-Daemon" But the smart card daemon is up and running: Code: # systemctl status pcscd ● pcscd.service - PC/SC Smart Card Daemon Loaded: loaded (/usr/lib/systemd/system/pcscd.service; indirect; vendor preset: disabled) Active: active (running) since Fr 2015-09-18 22:44:48 CEST; 1s ago Main PID: 3230 (pcscd) CGroup: /system.slice/pcscd.service └─3230 /usr/sbin/pcscd --foreground --auto-exit OS is Fedora 23. Any idea what goes wrong here? |
Author: | owl102 [ Fri Sep 18, 2015 10:20 pm ] |
Post subject: | Re: Resetting the opengpg applet fails - ERR 67108983 |
Addendum: I tried to figure out why "gpg --card-status" works fine and "gpg2 --card-status" don't. I guess that gpg-agent is not working properly here. However, suddenly "gpg --card-status" does not work anymore, without actually changing anything on the YubiKey itself: Code: [xxx@yyy ~]$ ykinfo -v Yubikey core error: no yubikey present [xxx@yyy ~]$$ yubico-piv-tool -a status Failed to connect to reader. [xxx@yyy ~]$ gpg --card-status gpg: detected reader `Yubico Yubikey NEO CCID 00 00' gpg: apdu_send_simple(0) failed: no card Legen Sie die Karte ein und drücken Sie 'Eingabe'; drücken Sie 'c' um abzubrechen: Rebooting the PC does not make a difference. So it seems that this YubiKey needs service? |
Author: | owl102 [ Mon Sep 28, 2015 9:12 pm ] |
Post subject: | Re: [SOLVED] Resetting the opengpg applet fails - ERR 671089 |
Solved by getting a new YubiKey. Since gpg-connect-agent and gpg2 are working now out-of-the-box (without changing anything on the PC) it seems that the old YubiKey was faulty from the beginning. |
Page 1 of 1 | All times are UTC + 1 hour |
Powered by phpBB® Forum Software © phpBB Group https://www.phpbb.com/ |