Closed haplo closed 9 months ago
onlykey
commented
9 months ago I noticed that you are running an old version of firmware. Are you able to update to the latest: https://github.com/trustcrypto/OnlyKey-Firmware/releases/tag/v3.0.4-prod
The issue appears to be that the OKGETPUBKEY fails to receive back the public key.
haplo
commented
9 months ago Thank you @onlykey for the quick reply. I was going to upgrade the firmware but backup is not working for some reason. I opened a separate issue for that:
haplo
commented
9 months ago Update: I upgraded the firmware to 3.0.4, issue is still happening.
I also tried with a different OnlyKey with a restored backup, also with latest firmware, same issue.
I tried with my OnlyKey DUO, firmware 3.0.1, same issue.
A key difference is in the GnuPG version of the two systems, the one that works (Kubuntu 22.04) is at GnuPG 2.2.27 libgcrypt 1.9.4, the faulty one (Arch Linux) is GnuPG 2.4.3 libgcrypt 1.10.3.
I will try generating a fresh gpg homedir and report back.
haplo
commented
9 months ago A fresh GnuPG profile works properly, so there must be something wrong inside the GnuPG homedir. It was copied from the old system, but because the GnuPG major versions were different (2.2 vs. 2.4) there might have been some data format discrepancy.
I will now try creating a fresh profile, export the keys and ownertrust from the old homedir and importing in the new one.
haplo
commented
9 months ago Creating the fresh homedir worked, so it was the GnuPG migration after all, probably on account of the different major versions.
In the old system:
gpg --export-ownertrust > ownertrust_export
gpg --export > keys_export
# copy the files to the new systemIn the new one:
gpg --import-ownertrust ownertrust_export
gpg --import keys_exportThanks for working through the issues here. I am sorry you ran into this issue but glad you found the solution. I can try and see what is different between the contents of the old homedir and the new homedir if you are able to do a diff of the working vs non-working files that would help me find out what the issue was here.
My Onlykey has been working fine in Kubuntu 22.04 LTS, but I'm now setting up a new system with Arch Linux and I haven't been able to get onlykey-gpg-agent to work. I copied
~/.gnupg/onlykeyto the new computer, if that's any hint.Take for example:
The agent log is very long, because of the
HAVEKEY --list=1000operations, but what I see is that first it gets the right public key (ed25519) from the OnlyKey, but then right after it tries to find another (rsa) and fails with an error:onlykey-agent is working fine for SSH, as is the OnlyKey desktop and CLI apps.
This is with
onlykey-gpg-agentversion 1.1.15 andlib-agentversion 1.0.6. Kubuntu was usingonlykey-gpg-agent1.1.14 andlib-agent1.0.5, but after upgrading both it keeps working fine.