search

flathub / com.yubico.yubioath

https://flathub.org/apps/details/com.yubico.yubioath
9 stars 10 forks source link

Failed to open smart card connection #90

Open MrRinkana opened 1 month ago

MrRinkana commented 1 month ago

I'm not sure what changed but after updating my tumbleweed system today, I can no longer access my TOTP from yubikey authenticator:

Error is: "Failed to open smart card connection - Make sure pcscd is installed and running."

systemctl status pcscd returns: "active (running)" Installed packages are:

 S  | Name               | Summary                                                                    | Type
---+--------------------+----------------------------------------------------------------------------+--------
i  | libpcsclite1       | PC/SC Smart Card Library                                                   | package
i  | libpcsclite1-32bit | PC/SC Smart Card Library                                                   | package
i  | pcsc-ccid          | PCSC Driver for CCID Based Smart Card Readers and GemPC Twin Serial Reader | package
i  | pcsc-lite          | PC/SC Smart Cards Library                                                  | package

App is running as flatpak, system is opensuse tumbleweed version 20240810

I can check my passkeys trough the app, the home tab seems normal, I can see if the slots are configured. TOTP and certificates do not work (same error)

Erick555 commented 1 month ago

It's possible that opensuse tumbleweed updates pcsclite to 2.3.0 and you hit https://github.com/LudovicRousseau/PCSC/issues/199

You may check with pcscd --version

MrRinkana commented 1 month ago

This seems indeed to be the case, my pcsc version is 2.3.0.

I assume the flatpack app needs to update its bindings then?

Downgrading one package is not really a thing in tumbleweed as its a rolling release, and as the linked issue mentions wouldn't there be a risk other things break in the system instead?

Erick555 commented 1 month ago

The problem with updating flatpak is that it will break non-rolling suse flavors alongside debian, ubuntu and everyone who didn't update to 2.3.0 yet. This is ugly choice for flatpak maintainer.

If you know how to downgrade one package on your system and feel comfortably with it then it's easiest workaround for now and buys some time.

MrRinkana commented 1 month ago

So there is no way for a flatpak to specify minimum version of a package? Such that an update would be blocked until the distro provides 2.3.0?

I understand that it might be a problem for frequently updated flatpaks, but this one (yubi aunth) is rather stable, maybe it would be possible?

Erick555 commented 1 month ago

No, it's not possible for flatpak.

MrRinkana commented 4 weeks ago

That's a bummer.. Alright then i assume this issue should be closed as "can't fix", feel free to reopen if it's preferred to keep it as waiting on upstream!

Erick555 commented 4 weeks ago

I think it's better to gave it opened for visibility for other users.

hafeoz commented 3 weeks ago

So I've created a PR #91 that bumps the pcsc-lite version so that flathubbot can create a test build for it. My understanding is that anyone encountering this issue can use the test build instead:

flatpak install https://dl.flathub.org/build-repo/123756/com.yubico.yubioath.flatpakref
Fei1Yang commented 3 weeks ago

@Erick555 Can you please merge this PR to the beta branch alongside with all the commits it currently lacking from the master branch, so users with pcsc 2.3 can install it from the flathub-beta repo instead of a flatpakref, therefore retaining auto update functionality?

Erick555 commented 3 weeks ago

@Fei1Yang I'm not maintainer of this app - @Lunarequest is.

MrRinkana commented 3 weeks ago

Beta build with the version bump seems like the smoothest transition, i like that idea! Reopening both for visibility and since there is a feasible solution on the horizon in this repo

Fei1Yang commented 3 weeks ago

Beta build with the version bump seems like the smoothest transition, i like that idea! Reopening both for visibility and since there is a feasible solution on the horizon in this repo

There is no such thing as "version bump" in flatpak ecosystem, however it also won't be very smooth, flathub-beta is another repository the user needed to add. but it will be better than a flatpakref for sure.

suntorytimed commented 3 weeks ago

Having the change in flathub-beta would be great. Right now it's sitting on 6.0.0 anyways. Unfortunately the flatpakref doesn't seem to be avaiable anymore.

Probably best to just force push https://github.com/hafeoz/com.yubico.yubioath/tree/master onto the beta branch. That's at least what I would do.

Erick555 commented 3 weeks ago

flathub doesn't allow force-push to release branches

Erick555 commented 2 weeks ago

beta now supports pcsclite 2.3.0 and above. stable supports below 2.3.0