search

subgraph / subgraph-os-issues

Subgraph OS issues repository
74 stars 9 forks source link

use of GPG smartcard nitrokey not working #311

Open DarkCoridor opened 6 years ago

DarkCoridor commented 6 years ago

After I do instructions from nitrokey website to make my device work with SGOS

https://www.nitrokey.com/documentation/installation#p:nitrokey-pro&os:linux

I notice on configuring the file /etc/libccid_Info.plist all values in the nitrokey instructions was already in plist file except there was only one 0x20A0 however, running the following command displays:

user@subgraph:~$ gpg --card-status
gpg: selecting openpgp failed: No such device
gpg: OpenPGP card not available: No such device

Inspecting dmesg looks fine

[ 1875.128173] usb 2-1.2: new full-speed USB device number 3 using ehci-pci
[ 1875.238490] usb 2-1.2: New USB device found, idVendor=20a0, idProduct=4108
[ 1875.238498] usb 2-1.2: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1875.238502] usb 2-1.2: Product: Nitrokey Pro
[ 1875.238505] usb 2-1.2: Manufacturer: Nitrokey
[ 1875.238508] usb 2-1.2: SerialNumber: 00001DC20000000000000000
[ 1875.241700] input: Nitrokey Nitrokey Pro as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1.2/2-1.2:1.0/0003:20A0:4108.0002/input/input19
[ 1875.301243] hid-generic 0003:20A0:4108.0002: input,hidraw0: USB HID v1.10 Keyboard [Nitrokey Nitrokey Pro] on usb-0000:00:1d.0-1.2/input0

But then syslog shows more info

Oct 25 10:27:26 subgraph kernel: [ 3458.828525] usb 1-1.2: new full-speed USB device number 7 using ehci-pci
Oct 25 10:27:26 subgraph kernel: [ 3458.942311] usb 1-1.2: New USB device found, idVendor=20a0, idProduct=4108
Oct 25 10:27:26 subgraph kernel: [ 3458.942319] usb 1-1.2: New USB device strings: Mfr=1, Product=2, SerialNumber=3
Oct 25 10:27:26 subgraph kernel: [ 3458.942322] usb 1-1.2: Product: Nitrokey Pro
Oct 25 10:27:26 subgraph kernel: [ 3458.942325] usb 1-1.2: Manufacturer: Nitrokey
Oct 25 10:27:26 subgraph kernel: [ 3458.942328] usb 1-1.2: SerialNumber: 00001DC20000000000000000
Oct 25 10:27:26 subgraph kernel: [ 3458.944746] input: Nitrokey Nitrokey Pro as /devices/pci0000:00/0000:00:1a.0/usb1/1-1/1-1.2/1-1.2:1.0/0003:20A0:4108.0005/input/input22
Oct 25 10:27:26 subgraph kernel: [ 3459.004990] hid-generic 0003:20A0:4108.0005: input,hidraw0: USB HID v1.10 Keyboard [Nitrokey Nitrokey Pro] on usb-0000:00:1a.0-1.2/input0
Oct 25 10:27:26 subgraph systemd-udevd[3666]: failed to execute '/lib/udev/mtp-probe' 'mtp-probe /sys/devices/pci0000:00/0000:00:1a.0/usb1/1-1/1-1.2 1 7': No such file or directory
Oct 25 10:27:26 subgraph systemd[1]: Reached target Smart Card.
Oct 25 10:27:26 subgraph /usr/lib/gdm3/gdm-x-session[1561]: (II) config/udev: Adding input device Nitrokey Nitrokey Pro (/dev/input/event17)
Oct 25 10:27:26 subgraph /usr/lib/gdm3/gdm-x-session[1561]: (**) Nitrokey Nitrokey Pro: Applying InputClass "libinput keyboard catchall"
Oct 25 10:27:26 subgraph /usr/lib/gdm3/gdm-x-session[1561]: (II) Using input driver 'libinput' for 'Nitrokey Nitrokey Pro'
Oct 25 10:27:26 subgraph /usr/lib/gdm3/gdm-x-session[1561]: (II) systemd-logind: got fd for /dev/input/event17 13:81 fd 47 paused 0
Oct 25 10:27:26 subgraph /usr/lib/gdm3/gdm-x-session[1561]: (**) Nitrokey Nitrokey Pro: always reports core events
Oct 25 10:27:26 subgraph /usr/lib/gdm3/gdm-x-session[1561]: (**) Option "Device" "/dev/input/event17"
Oct 25 10:27:26 subgraph /usr/lib/gdm3/gdm-x-session[1561]: (**) Option "_source" "server/udev"
Oct 25 10:27:26 subgraph /usr/lib/gdm3/gdm-x-session[1561]: (II) input device 'Nitrokey Nitrokey Pro', /dev/input/event17 is tagged by udev as: Keyboard
Oct 25 10:27:26 subgraph /usr/lib/gdm3/gdm-x-session[1561]: (II) input device 'Nitrokey Nitrokey Pro', /dev/input/event17 is a keyboard
Oct 25 10:27:26 subgraph /usr/lib/gdm3/gdm-x-session[1561]: (**) Option "config_info" "udev:/sys/devices/pci0000:00/0000:00:1a.0/usb1/1-1/1-1.2/1-1.2:1.0/0003:20A0:4108.0005/input/input22/event17"
Oct 25 10:27:26 subgraph /usr/lib/gdm3/gdm-x-session[1561]: (II) XINPUT: Adding extended input device "Nitrokey Nitrokey Pro" (type: KEYBOARD, id 13)
Oct 25 10:27:26 subgraph /usr/lib/gdm3/gdm-x-session[1561]: (**) Option "xkb_model" "pc105"
Oct 25 10:27:26 subgraph /usr/lib/gdm3/gdm-x-session[1561]: (**) Option "xkb_layout" "us"
Oct 25 10:27:26 subgraph /usr/lib/gdm3/gdm-x-session[1561]: (WW) Option "xkb_variant" requires a string value
Oct 25 10:27:26 subgraph /usr/lib/gdm3/gdm-x-session[1561]: (WW) Option "xkb_options" requires a string value
Oct 25 10:27:26 subgraph /usr/lib/gdm3/gdm-x-session[1561]: (II) input device 'Nitrokey Nitrokey Pro', /dev/input/event17 is tagged by udev as: Keyboard
Oct 25 10:27:26 subgraph /usr/lib/gdm3/gdm-x-session[1561]: (II) input device 'Nitrokey Nitrokey Pro', /dev/input/event17 is a keyboard
Oct 25 10:27:29 subgraph systemd[1]: Started PC/SC Smart Card Daemon.
Oct 25 10:27:29 subgraph pcscd[3702]: 00000000 hotplug_libudev.c:184:HPReadBundleValues() Error parsing /usr/lib/pcsc/drivers/ifd-ccid.bundle/Contents/Info.plist
Oct 25 10:27:29 subgraph gpg-agent[2019]: scdaemon[3054]: pcsc_list_readers failed: unknown PC/SC error code (0x8010002e)
DarkCoridor commented 6 years ago

Fixed. By commenting out use-agent in the .gnupg/gpg.conf in SGOS makes NitroKey properly recognized and function. But in normal Debian Stretch / gnupg 2.2.1 it does not seem to matter.