search

Yubico / ykneo-openpgp

OpenPGP applet for the YubiKey NEO
https://developers.yubico.com/ykneo-openpgp/
GNU General Public License v2.0
215 stars 67 forks source link

gpg can't see results of key import #7

Closed TonyHoyle closed 11 years ago

TonyHoyle commented 11 years ago

I use $ python keyParser.py B6 C9 9E3C20D4 (I'm assuming B6 C9 is correct?)

This prints out two lines to enter. I enter those and no errors occur (subject to a bug fix I'll enter in another issue).

Unfortunately gpg can't see the key:

Application ID ...: D2760001240102000000000000010000 Version ..........: 2.0 Manufacturer .....: test card Serial number ....: 00000001 Name of cardholder: [not set] Language prefs ...: [not set] Sex ..............: unspecified URL of public key : [not set] Login data .......: [not set] Signature PIN ....: forced Key attributes ...: 2048R 2048R 2048R Max. PIN lengths .: 127 127 127 PIN retry counter : 3 3 3 Signature counter : 0 Signature key ....: [none] Encryption key....: [none] Authentication key: [none] General key info..: [none]

Version details: opensc 0.13.0 monkeysphere 0.36 Python 2.7.2 gpg 2.0.19

Is there another step?

jas4711 commented 11 years ago

Have you tried ejecting the neo and restarting various services (scdaemon, gpg-agent)? Just an idea.

TonyHoyle notifications@github.com skrev:

I use $ python keyParser.py B6 C9 9E3C20D4 (I'm assuming B6 C9 is correct?)

This prints out two lines to enter. I enter those and no errors occur (subject to a bug fix I'll enter in another issue).

Unfortunately gpg can't see the key:

Application ID ...: D2760001240102000000000000010000 Version ..........: 2.0 Manufacturer .....: test card Serial number ....: 00000001 Name of cardholder: [not set] Language prefs ...: [not set] Sex ..............: unspecified URL of public key : [not set] Login data .......: [not set] Signature PIN ....: forced Key attributes ...: 2048R 2048R 2048R Max. PIN lengths .: 127 127 127 PIN retry counter : 3 3 3 Signature counter : 0 Signature key ....: [none] Encryption key....: [none] Authentication key: [none] General key info..: [none]

Version details: opensc 0.13.0 monkeysphere 0.36 Python 2.7.2 gpg 2.0.19

Is there another step?

Reply to this email directly or view it on GitHub: https://github.com/Yubico/ykneo-openpgp/issues/7

TonyHoyle commented 11 years ago

On 04/08/2013 18:48, Simon Josefsson wrote:

Have you tried ejecting the neo and restarting various services (scdaemon, gpg-agent)? Just an idea.

I've tried a full reboot just to be sure.

Is there a way of querying the key directly to find out if the data wrote correctly?

Tony

klali commented 11 years ago

Hello!

Have you got the latest version of the applet loaded in your neo?

Success for the opensc-tool commands is that everything returns 90 00, everything else is a fail (and the fingerprint loading with anything else than the just updated version of the script should fail).. So feedback on that version would be much appreciated.

/klas

TonyHoyle commented 11 years ago

On 05/08/2013 12:12, Klas Lindfors wrote:

Hello!

Have you got the latest version of the applet loaded in your neo?

Success for the opensc-tool commands is that everything returns 90 00, everything else is a fail (and the fingerprint loading with anything else than the just updated version of the script should fail).. So feedback on that version would be much appreciated.

I'm using the version from http://static.yubico.com/var/uploads/files/openpgpcard.cap which I presume is fairly up to date.

When I'm setting the key I get 90 00 for everything except the last line, which returns SW1=0x69, SW2=0x82

Tony

klali commented 11 years ago

Yeah, that cap file should be recent. the error code 69 82 is security status not satisfied which means that admin pin isn't validated in this case.

are you running the version which only spits out one opensc-tool command now? does the second -s part start with "00 20"? is the return on that command to the card "90 00"?

/klas

TonyHoyle commented 11 years ago

On 06/08/2013 08:16, Klas Lindfors wrote:

Yeah, that cap file should be recent. the error code 69 82 is security status not satisfied which means that admin pin isn't validated in this case.

are you running the version which only spits out one opensc-tool command now? does the second -s part start with "00 20"? is the return on that command to the card "90 00"?

I've just updated from the latest repo. The new pin support seems to have sorted it :p

Tony

klali commented 11 years ago

great!