RNP does not recognize yubikey STUB primary key

[tigernero79]

I'm trying to import a secret primary key generated with yubico 5 Nfc token, Stub secret key which recalls the actual one stored in the yubico. but when I try to import it although recognized it doesn't recognize passphrase or PIN for import. i believe that RNP does not handle openpgp smartcard which yubico 5 Nfc has the standard? everything worked with enigmail instead. because it was aimed at gnupgp. I can enable use of gnupgp in Thunderbird but I was wondering if RNP has a roadmap to handle secret Key import of a yubikey token.

[ronaldtse]

Thanks @tigernero79 for reporting this, you are correct that RNP itself does not currently handle OpenPGP smart cards. This functionality is currently on our todo list but it will be quite a few months away.

Thunderbird 78 with RNP does handle smart cards using a compatibility bridge using GnuPG, perhaps you should ask the Thunderbird team (ping @kaie )?

[tigernero79]

@ronaldtse I tried to set the value in thunderbird: = mail.openpgp.allow_external_gnupg, to make sure that if rnp did not find primary keys in its database it would query gnupg. tested but didn't work anyway. I want to clarify that everything was perfect with enigmail plugin.

[komatom]

I vote or yubikey support in RNP too, it will be quiet nice for email.. I also tried running thunderbird over the bridge to gnupg but no luck there..

[ni4]

@komatom While it is sort of offtopic here, still may be useful - if you are using macOS, then this might be helpful: https://bugzilla.mozilla.org/show_bug.cgi?id=1675742 I was able to make it work with Yubikey, but in a slightly weird way.

[tigernero79]

after 2 years, is there any news for native rnp support for yubikey smartcards? possible that a way like gnupgp to manage Key private stub on yubico token has not been found?

[ni4]

@tigernero79 Sorry for answering so lately, somehow notification got buried in mail folder. Support for yubikey and other tokens is quite a complicated thing, so unfortunately I cannot give any estimation at the moment.

[tigernero79]

@tigernero79 Sorry for answering so lately, somehow notification got buried in mail folder. Support for yubikey and other tokens is quite a complicated thing, so unfortunately I cannot give any estimation at the moment.

do you know what the problem is? is that managing yubikey on Thunderbird without native support for Key private on smartcards and tokens makes using openpgp email difficult. most of the time even enabling gnupgp support Thunderbird crashes. I hope that another 2 years will not pass

[ni4]

I understand, I also use Yubikey with Thunderbird on macOS, having some issues and need for workaround.

[tigernero79]

Hi news for this big bug?