On Tuesday, February 14, 2017 at 6:49:44 AM UTC, Robin Lambertz wrote: > Hello, > > I'm trying to make my Yubikey Neo (a PGP smartcard) accessible to my GPG > Qube in a split-gpg + sys-usb setup. When attaching the Yubikey to the > GPG VM, however, PCSCD doesn't seem to detect my Yubikey (which leads it > to being unusable with gpg). I tried both an up-to-date archlinux and > the default fedora-23 templates, and in both cases the yubikey neo > doesn't show up in `pcsc_scan`. > > I started pcscd with `sudo LIBCCID_ifdLogLevel=0x000F pcscd --foreground > --debug --apdu --color | tee log.txt` to get more info. The logs are > attached, but the interesting bits are here : > > ``` > 00000206 ccid_usb.c:621:OpenUSBByName() Found Vendor/Product: 1050/0111 > (Yubico Yubikey NEO OTP+CCID) > 00000012 ccid_usb.c:623:OpenUSBByName() Using USB bus/device: 2/4 > 00000010 ccid_usb.c:680:OpenUSBByName() bNumDataRatesSupported is 0 > 00001997 ccid_usb.c:1244:InterruptRead() before (0) > 00103904 ccid_usb.c:1290:InterruptRead() after (0) (2) > 00000072 -> 000000 65 00 00 00 00 00 00 00 00 00 > 00002614 <- 000000 81 00 00 00 00 00 00 00 00 00 > 00000050 -> 000000 65 00 00 00 00 00 01 00 00 00 > 00103063 ccid_usb.c:836:ReadUSB() read failed (2/4): -7 LIBUSB_ERROR_TIMEOUT > 00000224 -> 000000 65 00 00 00 00 00 02 00 00 00 > 05002241 ccid_usb.c:797:WriteUSB() write failed (2/4): -7 > LIBUSB_ERROR_TIMEOUT > 00000242 ifdhandler.c:188:CreateChannelByNameOrChannel() failed > 00000159 ccid_usb.c:879:CloseUSB() Closing USB device: 2/4 > 00000151 ccid_usb.c:889:CloseUSB() Last slot closed. Release resources > 00000240 ccid_usb.c:189:close_libusb_if_needed() libusb_exit > 00000476 readerfactory.c:1110:RFInitializeReader() Open Port 0x200000 > Failed (usb:1050/0111:libudev:1:/dev/bus/usb/002/004) > 00000161 readerfactory.c:375:RFAddReader() Yubico Yubikey NEO OTP+CCID > init failed. > ``` > > When attaching the yubikey to the VM, ReadUSB returns immediately with > the TIMEOUT error (isn't that weird ?), while the WriteUSB times out > after 5 seconds. I'm wondering if it was possible the Qubes USB proxy > could cause those timeouts ? Anyone knows what else could cause those > errors ? > > Thank you for your time :) > > Robin Lambertz
I've been able to use my Yubikey 4 on a debian 8 qube successfully. (Remember to patch the libccid_Info.plist). Might be worth giving it a try? -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/b25b22e7-746e-48a4-8610-5cf39089e5b9%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
