Package: gnupg2
Version: 2.0.14-1.1
Severity: important

Unable to use SCM SPR 332 (USB) CHIPDRIVE pinpad card reader.

Attempts to initialize an OpenPGP card fail when a PIN input is
required from the card reader.

For example, 'gpg2 --change-pin' causes a pinentry window to appear
showing "Please enter the PIN Use the reader's keypad for input" and
an "OK" button.  However, when the pinentry window appears the mouse
pointer disappears; pressing keys on the reader's keypad produces an
audio response but no visible effect.  Eventually the pinentry window
disappears and the mouse pointer reappears.  The command 'gpg2
--card-status' shows the same status, including

        PIN retry counter : 3 3 3

before and after the failing 'gpg2 --change-pin' command as above.

Commands not using pinentry appear to act normally while all commands
requiring pinentry fail as described above.

'change-pin' appears to work as expected when using a SCM SCR 335 USB
card reader without a pinpad.

Both gpg and gpg2 behave the same as described here.

The card reader installation for udev followed the instructions at
<http://www.gnupg.org/howtos/card-howto/en/ch02s03.html#id2519429>,
the udev configuration looks like this:

,----[ ls -lR /etc/udev ]
 /etc/udev:
 total 104
 -rw-r--r-- 1 root root   229 May 25 16:53 gnupg-ccid.rules
 -rw-r--r-- 1 root root    92 Nov  2  2008 hdparm.rules
 -rw-r--r-- 1 root root 77683 Dec 17 19:41 libgphoto2.rules
 -rw-r--r-- 1 root root   397 Sep 18  2008 links.conf
 drwxr-xr-x 2 root root  4096 May 25 17:04 rules.d
 drwxr-xr-x 2 root root  4096 May 25 16:56 scripts
 -rw-r--r-- 1 root root   269 Dec  8 19:54 udev.conf

 /etc/udev/rules.d:
 total 16
 lrwxrwxrwx 1 root root   19 Dec 17 19:41 025_libgphoto2.rules ->
../libgphoto2.rules
 -rw-r--r-- 1 root root 1137 Oct  1  2008 65_dmsetup.rules.dpkg-bak
 -rw-r--r-- 1 root root 1612 May  5 14:12 70-persistent-cd.rules
 -rw-r--r-- 1 root root 1195 Dec 17 02:48 70-persistent-cd.rules.old
 -rw-r--r-- 1 root root  708 Dec 17 02:39 70-persistent-net.rules
 lrwxrwxrwx 1 root root   19 May 25 17:04 gnupg-ccid.rules ->
../gnupg-ccid.rules
 lrwxrwxrwx 1 root root   15 Dec 17 17:48 z60_hdparm.rules -> ../hdparm.rules

 /etc/udev/scripts:
 total 4
 -rwxr-xr-x 1 root root 910 May 25 16:56 gnupg-ccid
`----
,----[ cat /etc/udev/gnupg-ccid.rules ]
 # GPG SmartCard Reader Support
 #

 ACTION=="add", SUBSYSTEM=="usb", ENV{PRODUCT}=="4e6/e003/*",
RUN+="/etc/udev/scripts/gnupg-ccid"
 ACTION=="add", SUBSYSTEM=="usb", ENV{PRODUCT}=="4e6/5115/*",
RUN+="/etc/udev/scripts/gnupg-ccid"

`----
,----[ cat /etc/udev/scripts/gnupg-ccid | grep -vE '^$|^# ' ]
 #!/bin/bash
 #
 #
 GROUP=scard
 #
 #
 #
 if [ "${ACTION}" = "add" ] && [ -f "${DEVICE}" ]
 then
     chmod o-rwx "${DEVICE}"
     chgrp "${GROUP}" "${DEVICE}"
     chmod g+rw "${DEVICE}"
 fi
`----

My normal user is in the scard group.

,----[ printenv | grep GPG ]
 GPG_AGENT_INFO=/tmp/gpg-pDVNV5/S.gpg-agent:4362:1
 GPG_TTY=/dev/pts/2
`----
,----[ pgrep -fl gpg-agent ]
 4362 /usr/bin/gpg-agent --daemon --sh
--write-env-file=/home/jam/.gnupg/gpg-agent-info-athene
/usr/bin/dbus-launch --exit-with-session /usr/bin/seahorse-agent
--execute gnome-session
`----

Below is some information about the pinentry package in use.  I send
this report to gnupg2 because I suspect a configuration error and there
appear to be no user configuration options for this pinentry.

,----
 Package: pinentry-gtk2
 Version: 0.8.0-1

 Versions of packages pinentry-gtk2 depends on:
 ii  libc6                     2.11.1-1       Embedded GNU C Library: Shared lib
 ii  libglib2.0-0              2.24.1-1       The GLib library of C routines
 ii  libgtk2.0-0               2.20.1-1       The GTK+ graphical user interface
 ii  libncurses5               5.7+20100313-2 shared libraries for terminal hand
 ii  libpango1.0-0             1.28.0-1       Layout and rendering of internatio

 pinentry-gtk2 recommends no packages.

 Versions of packages pinentry-gtk2 suggests:
 ii  pinentry-doc                  0.8.0-1    documentation for pinentry package

 -- no debconf information
`----

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages gnupg2 depends on:
ii  dpkg                    1.15.7.2         Debian package management system
ii  gnupg-agent             2.0.14-1.1       GNU privacy guard - password agent
ii  install-info            4.13a.dfsg.1-5   Manage installed documentation in
ii  libbz2-1.0              1.0.5-4          high-quality block-sorting file co
ii  libc6                   2.11.1-1         Embedded GNU C Library: Shared lib
ii  libcurl3-gnutls         7.20.1-2         Multi-protocol file transfer libra
ii  libgcrypt11             1.4.5-2          LGPL Crypto library - runtime libr
ii  libgpg-error0           1.6-1            library for common error values an
ii  libksba8                1.0.7-2          X.509 and CMS support library
ii  libreadline6            6.1-2            GNU readline and history libraries
ii  zlib1g                  1:1.2.3.4.dfsg-3 compression library - runtime

Versions of packages gnupg2 recommends:
ii  libldap-2.4-2                 2.4.21-1   OpenLDAP libraries

Versions of packages gnupg2 suggests:
ii  gnupg-doc              2003.04.06+dak1-1 GNU Privacy Guard documentation
ii  xloadimage             4.1-16.1          Graphics file viewer under X11


-- no debconf information



-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to