Bug#1087273: yubikey-luks: Fails to validate passphrase when yubikey is inserted after first prompt message

[Timo Röhling]

Control: tags -1 + patch





Cheers
Timo

--
⢀⣴⠾⠻⢶⣦⠀   ╭────────────────────────────────────────────────────╮
⣾⠁⢠⠒⠀⣿⡁   │ Timo Röhling                                       │
⢿⡄⠘⠷⠚⠋⠀   │ 9B03 EBB9 8300 DF97 C2B1  23BF CC8C 6BDD 1403 F4CA │
⠈⠳⣄⠀⠀⠀⠀   ╰────────────────────────────────────────────────────╯

From: =?utf-8?q?Timo_R=C3=B6hling?= <roehl...@debian.org>
Date: Mon, 1 Dec 2025 12:34:45 +0100
Subject: Check for yubikey presence after passphrase prompt

---
 key-script | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/key-script b/key-script
index 79d2f85..2cdea28 100755
--- a/key-script
+++ b/key-script
@@ -19,7 +19,6 @@ message()
     return 0
 }
 
-check_yubikey_present="$(ykinfo -q -2)"
 
 # source for log_*_msg() functions, see LP: #272301
 if [ -e /scripts/functions ] ; then
@@ -40,6 +39,7 @@ fi
 
 PW="$($cryptkeyscript "$WELCOME_TEXT")"
 
+check_yubikey_present="$(ykinfo -q -2)"
 
 if [ "$check_yubikey_present" = "1" ]; then
 	message "Accessing yubikey..."

I am also affected by this bug. The attached patch fixed it on my system.

signature.asc
Description: PGP signature