2011/8/26 Chris Boyle <[email protected]>: > Has anyone seen this before? I've also mailed gnupg-devel, but no responses > yet. > > I just received an OpenPGP v2 card today from Kernel Concepts and am > encountering "Conditions of use not satisfied" when trying to verify > or change either of the PINs. An example log, trying to verify the > default admin PIN, is: > > scdaemon[11914]: chan_7 -> INQUIRE NEEDPIN |A|Please enter the Admin PIN > scdaemon[11914]: chan_7 <- [ 44 20 31 32 33 34 35 36 37 38 00 00 00 00 > 00 00 ...(76 byte(s) skipped) ] > scdaemon[11914]: chan_7 <- END > 2011-08-25 21:49:08 scdaemon[11914] DBG: send apdu: c=00 i=20 p1=00 > p2=83 lc=8 le=-1 em=0 > 2011-08-25 21:49:08 scdaemon[11914] DBG: raw apdu: 00 20 00 83 08 31 > 32 33 34 35 36 37 38 > 2011-08-25 21:49:08 scdaemon[11914] DBG: ccid-driver: PC_to_RDR_XfrBlock: > 2011-08-25 21:49:08 scdaemon[11914] DBG: ccid-driver: dwLength ..........: > 13 > 2011-08-25 21:49:08 scdaemon[11914] DBG: ccid-driver: bSlot .............: 0 > 2011-08-25 21:49:08 scdaemon[11914] DBG: ccid-driver: bSeq ..............: > 204 > 2011-08-25 21:49:08 scdaemon[11914] DBG: ccid-driver: bBWI > ..............: 0x04 > 2011-08-25 21:49:08 scdaemon[11914] DBG: ccid-driver: > wLevelParameter ...: 0x0000 > 2011-08-25 21:49:08 scdaemon[11914] DBG: ccid-driver: [0010] 00 20 > 00 83 08 31 > 2011-08-25 21:49:08 scdaemon[11914] DBG: ccid-driver: [0016] 32 33 > 34 35 36 37 38 > 2011-08-25 21:49:08 scdaemon[11914] DBG: ccid-driver: RDR_to_PC_DataBlock: > 2011-08-25 21:49:08 scdaemon[11914] DBG: ccid-driver: dwLength ..........: 2 > 2011-08-25 21:49:08 scdaemon[11914] DBG: ccid-driver: bSlot .............: 0 > 2011-08-25 21:49:08 scdaemon[11914] DBG: ccid-driver: bSeq ..............: > 204 > 2011-08-25 21:49:08 scdaemon[11914] DBG: ccid-driver: bStatus ...........: 0 > 2011-08-25 21:49:08 scdaemon[11914] DBG: ccid-driver: [0010] 69 85 > 2011-08-25 21:49:08 scdaemon[11914] DBG: response: sw=6985 datalen=0 > 2011-08-25 21:49:08 scdaemon[11914] verify CHV3 failed: Conditions of > use not satisfied > scdaemon[11914]: chan_7 -> ERR 100663427 Conditions of use not satisfied <SCD> > > The only discussions I could find of people seeing this error in this > situation were where people had deny-admin set, which I don't. > > The reader is a Vasco DP855 which I received new a few days ago. I > have no other reader. I have tried the reset-to-factory-defaults file, > which did not change my results. > > Does anyone have any idea what might cause this response? I looked at > the OpenPGP v2 spec and it just mentioned it as a possible error, not > causes.
raw apdu: 00 20 00 83 08 31 32 33 34 35 36 37 38 response: sw=6985 Your APDU looks correct with pin code 12345678 card answer is 6985: "Conditions of use not satisfied." Do you have the same error with a different PIN? Have you locked your card? No problem at the reader or card communication level. Note that you are NOT using PC/SC but the internal GnuPG direct smart card reader access. I can be a bug in GnuPG or in the card. Bye -- Dr. Ludovic Rousseau _______________________________________________ Muscle mailing list [email protected] http://lists.drizzle.com/mailman/listinfo/muscle
