smartcard - scdaemon and pcscd conflicting

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi all,

Using (Fedora 31) a yubikey for both storing GPg-keys and ans SSL-certificate seems to create a conflict between pcscd and scdaemon.

Using gpg-agent is most usefull, it will avoid asking for the key/Yubikey password all the time; however: it will start  scdaemon and both pcscd and scdaemon try to access the smartcard reader exclusively:

Depending on which is (re)started first:

Jan 28 12:01:25 laptop-winfried.blabla.bla pcscd[9786]: 00033944 winscard.c:286:SCardConnect() Error Reader Exclusive
jan 28 12:01:25 laptop-winfried.blabla.bla pcscd[9786]: 00034140 winscard.c:286:SCardConnect() Error Reader Exclusive
jan 28 12:01:25 laptop-winfried.blabla.bla pcscd[9786]: 00033895 winscard.c:286:SCardConnect() Error Reader Exclusive
jan 28 12:01:25 laptop-winfried.blabla.bla pcscd[9786]: 00034205 winscard.c:286:SCardConnect() Error Reader Exclusive
jan 28 12:01:25 laptop-winfried.blabla.bla pcscd[9786]: 00032693 winscard.c:286:SCardConnect() Error Reader Exclusive
jan 28 12:01:25 laptop-winfried.blabla.bla pcscd[9786]: 00031293 winscard.c:286:SCardConnect() Error Reader Exclusive

Or when pcscd, gpg is not abaile to communicate with the card reader resulting in:

gpg2 --card-status
gpg: selecting card failed: No such device
gpg: OpenPGP card not available: No such device

Most topics "on the internet" mention to disable pcscd when using gpg or 

in $HOME/.gnupg/scdaemon.conf using "disable-ccid"
pcsc-driver /usr/lib64/libpcsclite.so.1
disable-ccid

The latter however just won't work; gpg will not be able to access the smartcard.

FYI; is seems it is not an "exclusive" Yubikey problem. Besides yubikey, I also use a gnuPG (OpenPGP) Smartcard. different card, different card reader same problem...

Hence: any solution for pcscd an scdaemon to work together....?

Winfried
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux