I'm playing around with a new Yubikey Neo. I've been trying to load the latest version of the OpenPGP applet (
https://github.com/Yubico/ykneo-openpgp), but am encountering issues.
I've followed the directions on both the applet github page and on the "How to install an applet" forum thread (
viewtopic.php?f=26&t=1159). I have globalplatform-6.0.0, gppcscconnectionplugin-1.1.0, gpshell-1.4.4, and libykneomgr (
https://github.com/Yubico/libykneomgr) all built from source and installed to /usr/local/:
Code:
$ ls -al /usr/local/bin/
drwxr-xr-x 1 root root 100 Dec 8 21:05 .
drwxr-xr-x 1 root root 96 Sep 24 21:43 ..
...
-rwxr-xr-x 1 root root 97380 Oct 24 21:08 gpshell
-rwxr-xr-x 1 root root 55689 Dec 8 21:05 ykneomgr
...
Code:
$ ls -al /usr/local/lib/
drwxr-xr-x 1 root root 734 Dec 8 21:05 .
drwxr-xr-x 1 root root 96 Sep 24 21:43 ..
...
-rw-r--r-- 1 root root 851226 Oct 24 21:05 libglobalplatform.a
-rwxr-xr-x 1 root root 1042 Oct 24 21:05 libglobalplatform.la
lrwxrwxrwx 1 root root 26 Oct 24 21:05 libglobalplatform.so -> libglobalplatform.so.6.0.0
lrwxrwxrwx 1 root root 26 Oct 24 21:05 libglobalplatform.so.6 -> libglobalplatform.so.6.0.0
-rwxr-xr-x 1 root root 559391 Oct 24 21:05 libglobalplatform.so.6.0.0
-rw-r--r-- 1 root root 49054 Oct 24 21:07 libgppcscconnectionplugin.a
-rwxr-xr-x 1 root root 1151 Oct 24 21:07 libgppcscconnectionplugin.la
lrwxrwxrwx 1 root root 34 Oct 24 21:07 libgppcscconnectionplugin.so -> libgppcscconnectionplugin.so.1.0.1
lrwxrwxrwx 1 root root 34 Oct 24 21:07 libgppcscconnectionplugin.so.1 -> libgppcscconnectionplugin.so.1.0.1
-rwxr-xr-x 1 root root 41346 Oct 24 21:07 libgppcscconnectionplugin.so.1.0.1
-rw-r--r-- 1 root root 156384 Dec 8 21:05 libykneomgr.a
-rwxr-xr-x 1 root root 1051 Dec 8 21:05 libykneomgr.la
lrwxrwxrwx 1 root root 20 Dec 8 21:05 libykneomgr.so -> libykneomgr.so.0.0.2
lrwxrwxrwx 1 root root 20 Dec 8 21:05 libykneomgr.so.0 -> libykneomgr.so.0.0.2
-rwxr-xr-x 1 root root 84166 Dec 8 21:05 libykneomgr.so.0.0.2
drwxr-xr-x 1 root root 56 Dec 8 21:05 pkgconfig
...
My YubiKey Neo is connected, communicating with the ykneomgr utility, and set to the proper mode:
Code:
$ ykneomgr -m
82
$ ykneomgr -w
3.1.2
$ ykneomgr -l
0: Yubico Yubikey NEO OTP+CCID 00 00
$ ykneomgr -a
0: a0000000035350
1: a0000005272001
2: d27600012401
$ lsusb
...
Bus 001 Device 032: ID 1050:0111 Yubico.com
...
I have also white-listed the device in the pcscd config as described at
viewtopic.php?f=26&t=982&start=10 (although it appears that this may no longer be necessary).
When I try to use the ykneomgr utility to install the latest OpenPGP cap file (1.0.5), I get the following error (debug enabled):
Code:
$ ykneomgr -d --applet-install=./applet/bin/openpgpcard/javacard/openpgpcard.cap
Trying reader 0: Yubico Yubikey NEO OTP+CCID 00 00
atr length 20
atr: 3b fa 13 00 00 81 31 fe 15 59 75 62 69 6b 65 79 4e 45 4f a6
atr: . . . . . . 1 . . Y u b i k e y N E O .
logicalChannel 0
specVersion 211
--> 13: 00 a4 04 00 08 a0 00 00 05 27 20 01 01
Command --> 00A4040008A000000527200101
Wrapped command --> 00A4040008A000000527200101
Response <-- 030102018507820000009000
<-- 12: 03 01 02 01 85 07 82 00 00 00 90 00
versionMajor 3
versionMinor 1
versionBuild 2
pgmSeq 1
touchLevel 34055
mode 82
crTimeout 0
autoEjectTime 0
--> 4: 00 01 10 00
Command --> 00011000
Wrapped command --> 00011000
Response <-- 0020171C9000
<-- 6: 00 20 17 1c 90 00
serialno 2103068
--> 13: 00 a4 04 00 08 a0 00 00 00 03 00 00 00
Command --> 00A4040008A000000003000000
Wrapped command --> 00A4040008A000000003000000
Response <-- 6F658408A000000003000000A5599F6501FF9F6E06479112103800734A06072A864886FC6B01600C060A2A864886FC6B02020101630906072A864886FC6B03640B06092A864886FC6B040255650B06092B8510864864020103660C060A2B060104012A026E01029000
<-- 105: 6f 65 84 08 a0 00 00 00 03 00 00 00 a5 59 9f 65 01 ff 9f 6e 06 47 91 12 10 38 00 73 4a 06 07 2a 86 48 86 fc 6b 01 60 0c 06 0a 2a 86 48 86 fc 6b 02 02 01 01 63 09 06 07 2a 86 48 86 fc 6b 03 64 0b 06 09 2a 86 48 86 fc 6b 04 02 55 65 0b 06 09 2b 85 10 86 48 64 02 01 03 66 0c 06 0a 2b 06 01 04 01 2a 02 6e 01 02 90 00
Command --> 8050000008006AEF403A50057300
Wrapped command --> 8050000008006AEF403A50057300
Response <-- 00003107002481967007FF02000E2A73D2AF62FF5EF835091943D1CC9000
Command --> 8482030010A1FDBED655CFA31C90C44237A68938A8
Wrapped command --> 8482030010A1FDBED655CFA31C90C44237A68938A8
Response <-- 9000
read_executable_load_file_parameters() returns 0x00000002 (No such file or directory)
error: ykneomgr_applet_install (-4): Backend error
When I try the same operation using the gpshell utility, I also get an error:
Code:
$ gpshell gpinstall.txt
mode_211
enable_trace
establish_context
establish_context failed with error 0xFFFFFFFFFFFFFFFF (libgppcscconnectionplugin.so.1.0.1: cannot open shared object file: No such file or directory)
As you can see from the commands at the top of this post, libgppcscconnectionplugin.so.1.0.1 is installed in /usr/local/lib:
Code:
$ ls -al /usr/local/lib/libgppcscconnectionplugin.so.1.0.1
-rwxr-xr-x 1 root root 41346 Oct 24 21:07 /usr/local/lib/libgppcscconnectionplugin.so.1.0.1
I have run ldconfig and the libraries are up to date.
I have tried both commands as my regular user and as root via sudo. The results are the same either way. I have also tried both the official OpenPGP 1.0.5 release as well as building the latest source in the master branch from GitHub repo. Again, the results are the same both times.
Any thoughts? I'd love to get the new cap file installed, but it's being... temperamental.
Login
FAQ
Search
