PROBLEM: gpg barfs =) when attempting to generate keys if the --disable-ccid option is not set. The error generally looks like this: gpg: apdu_send_simple(0) failed: unknown status error gpg: generating key failed gpg: key generation failed: general error Key generation failed: general error gpg: apdu_send_simple(0) failed: unknown status error gpg: failed to set `CHV-STATUS-1': general error gpg: error setting forced signature PIN flag: general error WORKAROUND: The above error disappears when using the --disable-option at the command prompt. An alias statement in .bashrc, is obviously a little better than that. PROPOSED SOLUTION: I preface the proposal, by stating I know very little about ebuilds at this point in time. But would it be possible to set this permanently during compile time, if a pcmcia base card reader is detected? Thanks for all you do.
Please, always include ebuild name and version plus emerge --info when reporting bugs.
Created attachment 92417 [details] emerge --info data for initial report As requested, and will do in the future.
ebuild name / version / USE flags: app-crypt/gnupg-1.9.20-r3 USE="smartcard -X -caps -gpg2-experimental -ldap -nls" See attachment 92417 [details] (created 2006-07-21 07:32 PST) for emerge --info
UPDATE: Although this 'seemed' to resolve the problem (tested on two different cards, only generating primary keys on the card), the problem continued to persist when I generated subkeys to add to the card. The same general error was present. Through trial and error, what seemed to help, was typing a bunch of junk into a dummy document to help increase random number generation, then generating a subkey. I was able to create three subkeys on the card using this approach. So maybe this is an issue with the application not getting enough random bits? I don't know enough to be sure, but that's my hunch.
Hello, I cannot really understand the problem. Can you please try to add some more description? Which cards do you use? Which readers do you use? Is there any other application where card work? Do you use pcsc-lite reader drivers, or relay on gnupg ccid implementation? Thanks!
As per comment #5 - need a bit more info. Please reopen when you attach it.
This line in my ".gnupg/scdaemon.conf" file is causing the problem. ``` trust-model tofu+pgp ```
(In reply to Xi from comment #7) > This line in my ".gnupg/scdaemon.conf" file is causing the problem. > > ``` > trust-model tofu+pgp > ``` Oh...sorry, I replied on the wrong bug. Please ignore.
