Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 8:42 pm

All times are UTC + 1 hour




Post new topic Reply to topic  [ 3 posts ] 
Author Message
PostPosted: Thu Dec 18, 2014 11:25 pm 
Offline

Joined: Thu Dec 18, 2014 11:02 pm
Posts: 6
My newly received NEO is not recognized as a smartcard reader by opensc on ubuntu 14.10:
Code:
$ opensc-tool -l
No smart card readers found.
and
Code:
$ pkcs11-tool --module /usr/lib/x86_64-linux-gnu/opensc-pkcs11.so --list-mechanisms
No slot with a token was found.

This is a faily recent version of opensc:
Code:
$ opensc-tool -i
opensc 0.13.0 [gcc  4.8.2]
Enabled features: zlib readline openssl pcsc(libpcsclite.so.1)

I already set the device to OTP + CCID + U2F mode ('-m86'), which I later confirmed using the neo manager app. I was also successful in creating gpg keys, and using those:
Code:
$ gpg --card-status
can't connect to `/run/user/1000/keyring-B9opIK/gpg': No such file or directory
Application ID ...: D2760001240102000006030220490000
Version ..........: 2.0
Manufacturer .....: unknown
Serial number ....: 03022049
Name of cardholder: [not set]
Language prefs ...: [not set]
Sex ..............: unspecified
URL of public key : [not set]
[...etc...]

But I am puzzled why opensc won't recognize the NEO. Any clues?

Edit:
Just tried with the 'latest and greatest' (git master) opensc, but no luck either:
Code:
$ ./opensc-tool -i
OpenSC 0.14.0 [gcc  4.9.1]
Enabled features: zlib openssl pcsc(libpcsclite.so.1)
$ ./opensc-tool -l
No smart card readers found.


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Fri Dec 19, 2014 12:51 am 
Offline
Yubico Team
Yubico Team

Joined: Thu Oct 16, 2014 3:44 pm
Posts: 349
Hello Syzzer -

I just wiped my Ubuntu 14.04 install to do some testing on Linux Mint 17. If you were to disable U2F in the NEO Manager and then run the command again, OpenSC should see the NEO as a card reader. As long as you've confirmed that's what happens, you likely haven't added the necessary udev rule yet that allows U2F to work properly. Without the run, applications also don't recognize the NEO as a card reader if U2F mode is also enabled. We have a command to resolve this, but just in case you want to review the code before implementing it: https://raw.githubusercontent.com/Yubic ... -ccid-udev

The command you need to run in order to implement the change is:

sudo sh -c 'wget -q -O - https://raw.githubusercontent.com/Yubic ... -ccid-udev | python'

I've confirmed this works on both Linux Mint and on Ubuntu. A reboot may be required, although it wasn't in my case with Linux Mint 17. You can also find the original post here if you want to read more about it: viewtopic.php?f=26&t=1609#p6270

-Chris


Top
 Profile  
Reply with quote  
PostPosted: Fri Dec 19, 2014 1:08 am 
Offline

Joined: Thu Dec 18, 2014 11:02 pm
Posts: 6
Thank you Chris! That indeed solved my problem.

For those after me who try copy-pasting from Chris' post: the url is shortened, which will result in the command silently failing. Here's the command with the full URL, copy-pasteable:
Code:
sudo sh -c 'wget -q -O - https://raw.githubusercontent.com/Yubico/yubikey-neo-manager/master/resources/linux-fix-ccid-udev | python'


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 3 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 9 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group