Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 892962 - app-crypt/ccid-1.5.1: does not automatically start (not-enabled) pcscd service when YubiKey is plugged
Summary: app-crypt/ccid-1.5.1: does not automatically start (not-enabled) pcscd servic...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: No maintainer - Look at https://wiki.gentoo.org/wiki/Project:Proxy_Maintainers if you want to take care of it
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-02-02 20:28 UTC by YOSHIOKA Takuma
Modified: 2024-06-03 20:28 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description YOSHIOKA Takuma 2023-02-02 20:28:37 UTC
With app-crypt/ccid-1.5.1 installed, app-crypt/yubioath-desktop-5.1.0-r3 does not recognize accounts already registered to Yubikey, and emits error "WARNING: PC/SC not available. Smart card protocols will not function." to stderr.

Reproducible: Always

Steps to Reproduce:
1. Install or update to app-crypt/yubioath-desktop-5.1.0-r3 and app-crypt/ccid to 1.5.1.
2. Run `yubioath-desktop` command, and insert Yubikey with some TOTP accounts registered.
Actual Results:  
yubioath-desktop shows an error message "WARNING: PC/SC not available. Smart card protocols will not function." to stderr, and GUI says "No accounts".

Expected Results:  
yubioath-desktop shows the TOTP accounts registered to the inserted Yubikey.

The issue does not reproduce with app-crypt/ccid-1.5.0, so you can downgrade it as a workaround.

Console with app-crypt/ccid-1.5.1:

```
$ yubioath-desktop
qrc:/qml/main.qml:305:5: QML Shortcut: Shortcut: Only binding to one of multiple key bindings associated with 7. Use 'sequences: [ <key> ]' to bind to all of them.
qrc:/qml/main.qml:297:5: QML Shortcut: Shortcut: Only binding to one of multiple key bindings associated with 9. Use 'sequences: [ <key> ]' to bind to all of them.
QSystemTrayIcon::setVisible: No Icon set
Qt Quick Layouts: Detected recursive rearrange. Aborting after two iterations.
Qt Quick Layouts: Detected recursive rearrange. Aborting after two iterations.
WARNING: PC/SC not available. Smart card protocols will not function.
qml: calculateAll failed: No eligiable connections are available ([<class 'yubikit.core.smartcard.SmartCardConnection'>]).
```

Console with app-crypt/ccid-1.5.0:

```
$ yubioath-desktop
qrc:/qml/main.qml:305:5: QML Shortcut: Shortcut: Only binding to one of multiple key bindings associated with 7. Use 'sequences: [ <key> ]' to bind to all of them.
qrc:/qml/main.qml:297:5: QML Shortcut: Shortcut: Only binding to one of multiple key bindings associated with 9. Use 'sequences: [ <key> ]' to bind to all of them.
QSystemTrayIcon::setVisible: No Icon set
Qt Quick Layouts: Detected recursive rearrange. Aborting after two iterations.
Qt Quick Layouts: Detected recursive rearrange. Aborting after two iterations.
```

`emerge --info`:

```
Portage 3.0.44 (python 3.10.9-final-0, default/linux/amd64/17.1/systemd/merged-usr, gcc-12, glibc-2.36-r7, 6.1.9-gentoo x86_64)
=================================================================
System uname: Linux-6.1.9-gentoo-x86_64-AMD_Ryzen_9_7950X_16-Core_Processor-with-glibc2.36
KiB Mem:    32003684 total,  12952236 free
KiB Swap:          0 total,         0 free
Timestamp of repository gentoo: Thu, 02 Feb 2023 19:16:59 +0000
Head commit of repository gentoo: e5cbe0f27d84aa005584ab0b5b9eaf95d83ae50b

Head commit of repository gentoo-zh: a4d19afe5f5be91c297118126545f07cd9dcbeb8

Timestamp of repository guru: Wed, 01 Feb 2023 21:46:56 +0000
Head commit of repository guru: af03e7349476dc49fa8ef2952d8c22968e15448d

Timestamp of repository haskell: Wed, 01 Feb 2023 17:16:54 +0000
Head commit of repository haskell: 35c0dc43fe5da3c0b831e754e3ef131050803d70

sh bash 5.2_p15-r1
ld GNU ld (Gentoo 2.40 p1) 2.40
app-misc/pax-utils:        1.3.7::gentoo
app-shells/bash:           5.2_p15-r1::gentoo
dev-lang/perl:             5.36.0-r2::gentoo
dev-lang/python:           3.10.9-r1::gentoo, 3.11.1-r1::gentoo
dev-lang/rust:             1.67.0::gentoo
dev-util/cmake:            3.25.2::gentoo
dev-util/meson:            1.0.0::gentoo
sys-apps/baselayout:       2.13-r1::gentoo
sys-apps/sandbox:          2.30-r1::gentoo
sys-apps/systemd:          252.5::gentoo
sys-devel/autoconf:        2.13-r7::gentoo, 2.71-r5::gentoo
sys-devel/automake:        1.16.5::gentoo
sys-devel/binutils:        2.40::gentoo
sys-devel/binutils-config: 5.5::gentoo
sys-devel/clang:           15.0.7-r1::gentoo
sys-devel/gcc:             11.3.1_p20230120-r1::gentoo, 12.2.1_p20230121-r1::gentoo
sys-devel/gcc-config:      2.10::gentoo
sys-devel/libtool:         2.4.7-r1::gentoo
sys-devel/lld:             15.0.7::gentoo
sys-devel/llvm:            15.0.7::gentoo
sys-devel/make:            4.4::gentoo
sys-kernel/linux-headers:  6.1::gentoo (virtual/os-headers)
sys-libs/glibc:            2.36-r7::gentoo
Repositories:

gentoo
    location: /var/db/repos/gentoo
    sync-type: git
    sync-uri: https://github.com/gentoo-mirror/gentoo.git
    sync-user: portage
    priority: -1000
    eclass-overrides: lo48576
    volatile: True
    sync-git-verify-commit-signature: true

gentoo-zh
    location: /var/db/repos/gentoo-zh
    sync-type: git
    sync-uri: https://github.com/microcai/gentoo-zh.git
    masters: gentoo
    priority: -100
    eclass-overrides: lo48576
    volatile: True

guru
    location: /var/db/repos/guru
    sync-type: git
    sync-uri: https://github.com/gentoo-mirror/guru.git
    masters: gentoo
    eclass-overrides: lo48576
    volatile: True

haskell
    location: /var/db/repos/haskell
    sync-type: git
    sync-uri: https://github.com/gentoo-mirror/haskell.git
    masters: gentoo
    eclass-overrides: lo48576
    volatile: True

lo48576
    location: /var/db/repos/lo48576
    masters: gentoo
    priority: 100
    eclass-overrides: lo48576
    volatile: True

Installed sets: @fav/fonts, @packages/ansible, @packages/pipewire, @purpose/yubikey, @purpose/zeroconf, @system/core, @system/filesystem, @system/gentoo-utils, @system/xorg-basic-utils
ACCEPT_KEYWORDS="amd64 ~amd64"
ACCEPT_LICENSE="@FREE @BINARY-REDISTRIBUTABLE"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=native -O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/config /usr/share/gnupg/qualified.txt"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/dconf /etc/env.d /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/revdep-rebuild /etc/sandbox.d"
CXXFLAGS="-march=native -O2 -pipe"
DISTDIR="/var/cache/distfiles"
ENV_UNSET="CARGO_HOME DBUS_SESSION_BUS_ADDRESS DISPLAY GDK_PIXBUF_MODULE_FILE GOBIN GOPATH PERL5LIB PERL5OPT PERLPREFIX PERL_CORE PERL_MB_OPT PERL_MM_OPT XAUTHORITY XDG_CACHE_HOME XDG_CONFIG_HOME XDG_DATA_HOME XDG_RUNTIME_DIR XDG_STATE_HOME"
FCFLAGS="-march=native -O2 -pipe"
FEATURES="assume-digests binpkg-docompress binpkg-dostrip binpkg-logs binpkg-multi-instance buildpkg-live config-protect-if-modified distlocks ebuild-locks fixlafiles ipc-sandbox merge-sync multilib-strict network-sandbox news parallel-fetch pid-sandbox preserve-libs protect-owned qa-unresolved-soname-deps sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans userfetch userpriv usersandbox usersync xattr"
FFLAGS="-march=native -O2 -pipe"
GENTOO_MIRRORS="     https://ftp.iij.ad.jp/pub/linux/gentoo     https://ftp.riken.jp/Linux/gentoo     https://ftp.jaist.ac.jp/pub/Linux/Gentoo     http://ftp.iij.ad.jp/pub/linux/gentoo     http://ftp.riken.jp/Linux/gentoo     http://ftp.jaist.ac.jp/pub/Linux/Gentoo     "
INSTALL_MASK=" /usr/bin/netaddr"
LANG="ja_JP.utf8"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
LEX="flex"
MAKEOPTS="-j32"
PKGDIR="/var/cache/binpkgs"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --omit-dir-times --compress --force --whole-file --delete --stats --human-readable --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --exclude=/.git"
PORTAGE_TMPDIR="/var/tmp"
SHELL="/bin/zsh"
USE="X aac acl acpi alsa amd64 apparmor avif bluetooth bluray bzip2 cairo cdr cjk cli crypt css curl dbus dri dvd dvdr egl exif ffmpeg flac fontconfig fortran gdbm gmp gnome-keyring gtk iconv icu inotify ipv6 jpeg jpeg2k lame libglvnd libnotify libtirpc linguas_en linguas_ja luajit lzma m17n-lib matroska mp3 mp4 mpeg multilib ncurses nls nptl ogg opengl openmp opus pam pcre pipewire png policykit pulseaudio readline screencast seccomp sqlite ssl startup-notification systemd taglib test-rust theora threads tiff tls truetype udev udisks unicode upower usb vaapi vorbis vulkan wavpack wayland wifi xattr xft xinerama xrandr zeroconf zlib zsh-completion zstd" ABI_X86="64" ADA_TARGET="gnat_2021" APACHE2_MODULES="authn_core authz_core socache_shmcb unixd actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="karbon sheets words" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" CPU_FLAGS_X86="aes avx avx2 avx512f avx512dq avx512cd avx512bw avx512vl avx512vbmi f16c fma3 mmx mmxext pclmul popcnt rdrand sha sse sse2 sse3 sse4_1 sse4_2 sse4a ssse3" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock greis isync itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf skytraq superstar2 timing tsip tripmate tnt ublox ubx" INPUT_DEVICES="libinput wacom" KERNEL="linux" L10N="en ja" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LIBREOFFICE_EXTENSIONS="presenter-console presenter-minimizer" LUA_SINGLE_TARGET="lua5-1" LUA_TARGETS="lua5-1" OFFICE_IMPLEMENTATION="libreoffice" PHP_TARGETS="php7-4 php8-0" POSTGRES_TARGETS="postgres12 postgres13" PYTHON_SINGLE_TARGET="python3_10" PYTHON_TARGETS="python3_10" RUBY_TARGETS="ruby31" USERLAND="GNU" VIDEO_CARDS="amdgpu fbdev nouveau radeonsi" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq proto steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  ADDR2LINE, AR, ARFLAGS, AS, ASFLAGS, CC, CCLD, CONFIG_SHELL, CPP, CPPFLAGS, CTARGET, CXX, CXXFILT, ELFEDIT, EMERGE_DEFAULT_OPTS, EXTRA_ECONF, F77FLAGS, FC, GCOV, GPROF, LC_ALL, LD, LFLAGS, LIBTOOL, LINGUAS, MAKE, MAKEFLAGS, NM, OBJCOPY, OBJDUMP, PORTAGE_BINHOST, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS, RANLIB, READELF, RUSTFLAGS, SIZE, STRINGS, STRIP, YACC, YFLAGS
```
Comment 1 Alexander Tsoy 2023-03-06 01:26:11 UTC
After upgrade to app-crypt/ccid-1.5.1 I noticed that pcscd daemon will not start automatically anymore due to changes in /lib/udev/rules.d/92-pcsc-ccid.rules. So this might be the cause for your issue as well.

If you run systemd, try "systemctl enable pcscd.socket"
Comment 2 YOSHIOKA Takuma 2023-03-06 21:14:41 UTC
(In reply to Alexander Tsoy from comment #1)
> After upgrade to app-crypt/ccid-1.5.1 I noticed that pcscd daemon will not
> start automatically anymore due to changes in
> /lib/udev/rules.d/92-pcsc-ccid.rules. So this might be the cause for your
> issue as well.
> 
> If you run systemd, try "systemctl enable pcscd.socket"

Thank you, confirmed that yubioath-desktop works as expected with `pcscd.socket` started.
Comment 3 Marek Szuba (RETIRED) archtester gentoo-dev 2023-03-06 22:38:30 UTC
Looks like this should either be closed or reassigned to app-crypt/ccid, then.
Comment 4 Thibaud CANALE 2024-06-02 05:12:37 UTC
I don’t have a Yubikey so I cannot verify, but I think this is the same issue than bug 902847, from where I provided a fix in a PR.
Comment 5 YOSHIOKA Takuma 2024-06-03 20:28:57 UTC
(In reply to Thibaud CANALE from comment #4)
> I don’t have a Yubikey so I cannot verify, but I think this is the same
> issue than bug 902847, from where I provided a fix in a PR.

Thank you.
Confirmed with my Yubikey that the problem is fixed. With sys-apps/pcsc-lite-2.0.1-r1 installed, `pcscd.service` is automatically started even when `pcscd.socket` is disabled. Now yubioath-desktop (original report) and git signing with GnuPG both works as intended.

Closing as resolved/fixed.