search

mdellweg / pass_secret_service

dbus-service to serve secret-service api with pass backend
GNU General Public License v3.0
47 stars 6 forks source link

use with yuibkey requires re-inserting the yubikey? #40

Open colemickens opened 1 year ago

colemickens commented 1 year ago

Hi,

I can't really explain this behavior, but when I use pass-secret-service, I see this behavior:

  1. I restart pass-secret-service (I can't remember what, but there's some env var that gets exported into the systemd user environment, but it races against pass-secret-service so I tend to just restart it as a safe workaround)
  2. I try to open nheko which happens to use the secret service.
  3. When pass-secret-service attempts to decrypt, I am re-prompted to authenticate to GPG, even if I've already been using it.
  4. The pinentry program I use tells me that my card is not available, and to insert it. If I simply remove the yubikey and re-insert it, it sees it and I'm able to proceed.

I can't quite think through what might be wrong, since I'm able to normally use GPG in every other use-case that I can think of.

Maybe it has to do with the user accessing GPG? I can understand re-authing, if that is the case, but not why I have to physically remove/re-insert in order to proceed.

mdellweg commented 11 months ago

I think i experienced similar things. Firefox claimed the cryptodevice without being asekd after some time. And it led to sc-daemon complaining that it cannot share. Can you try disabling the crypto device things in ff?