Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 612012 - =app-crypt/gnupg-2.1.18 scdaemon cannot access YubiKey or Lenovo Integrated SC Reader
Summary: =app-crypt/gnupg-2.1.18 scdaemon cannot access YubiKey or Lenovo Integrated S...
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal normal (vote)
Assignee: Kristian Fiskerstrand (RETIRED)
URL: https://bugs.gnupg.org/gnupg/issue2933
Whiteboard:
Keywords:
Depends on: 617960
Blocks: 611250
  Show dependency tree
 
Reported: 2017-03-07 23:14 UTC by Marek Szuba
Modified: 2017-06-10 11:20 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Marek Szuba archtester gentoo-dev 2017-03-07 23:14:46 UTC
I have just found out the hard way that the Debian bug 854595 is a problem for us too: upgrading app-crypt/gnupg to the recently stabilised 2.1.18 has resulted in its scdaemon no longer being able to access keys stored in the OpenPGP applet of YubiKeys (tested on several YK4s). Downgrading to 2.1.15 (and killing scdaemon) makes things go back to normal.

Please see the aforementioned Debian bug for a detailed description of symptoms.
Comment 1 Kristian Fiskerstrand (RETIRED) gentoo-dev 2017-03-08 11:06:31 UTC
Try with disable-ccid in scdaemon.conf and install app-crypt/ccid (killing scdaemon to ensure new drivers are used)
Comment 2 Andreas K. Hüttel archtester gentoo-dev 2017-03-09 08:28:16 UTC
I see the same effect with the smart card reader in my Thinkpad T520, 
Bus 002 Device 004: ID 17ef:1003 Lenovo Integrated Smart Card Reader

I have not tried k_f's advice yet, since I first went to the upstream bug. 

However, I can confirm that adding the two Debian patches from $URL to our 2.1.18 solves the problem for me, and I can access my card reader again.
Comment 3 Marek Szuba archtester gentoo-dev 2017-03-09 10:27:15 UTC
For the record, at least in case of YK4 disabling the built-in CCID driver in favour of the external one does help.
Comment 4 Kristian Fiskerstrand (RETIRED) gentoo-dev 2017-03-09 20:01:57 UTC
(In reply to Marek Szuba from comment #3)
> For the record, at least in case of YK4 disabling the built-in CCID driver
> in favour of the external one does help.

Also of interest is whether the issue persists in 2.1.19
Comment 5 Diogo Pereira 2017-03-09 21:01:08 UTC
Installing 2.1.19-r1 fixed the problem for me (YubiKey 4).
Comment 7 Kristian Fiskerstrand (RETIRED) gentoo-dev 2017-03-10 15:21:34 UTC
(In reply to Diogo Pereira from comment #5)
> Installing 2.1.19-r1 fixed the problem for me (YubiKey 4).

Right, the mentioned patches are included in it so I'm not surprised. So if the workaround isn't sufficient I'd prefer stabilizing 2.1.19 rather than applying the specific patches.
Comment 8 Kristian Fiskerstrand (RETIRED) gentoo-dev 2017-06-10 11:20:02 UTC
Already stable on all but ia64, so closing this bug