Bug#783703: pcscd needs to be restarted after first plugging of usb card reader

2015-04-29 Thread Andrew Gallagher
Package: pcscd
Version: 1.8.13-1
Severity: important

I am using an ACS card reader with openpgp smart card. It was working until I
rebooted, and then gnupg stopped recognising the card. Restarting pcscd with
the ACS reader plugged in fixed the problem, and the fix persists even after I
unplug/replug the usb reader.

The symptoms and workaround appear identical to this fedora bug:

https://bugzilla.redhat.com/show_bug.cgi?id=1092207

I noticed the same behaviour with the ordering of card readers before and after
pcscd restarts that the fedora OP reports:

agallagher@itchy:~$ gpg2 --card-status
gpg: selecting openpgp failed: Card not present
gpg: OpenPGP card not available: Card not present
agallagher@itchy:~$ opensc-tool -l
# Detected readers (pcsc)
Nr.  Card  Features  Name
0No  Broadcom Corp 5880 [Contacted SmartCard] (0123456789ABCD)
00 00
1Yes ACS ACR 38U-CCID 01 00
agallagher@itchy:~$ sudo service pcscd restart
[ ok ] Restarting PCSC Lite resource manager: pcscd.
agallagher@itchy:~$ gpg2 --card-status
Application ID ...: D27600012401020100052ED9
Version ..: 2.1
Manufacturer .: ZeitControl
Serial number : 2ED9
Name of cardholder: Andrew Gallagher
Language prefs ...: en
Sex ..: unspecified
URL of public key : http://xen.andrewg.com/andr...@andrewg.com.pub
Login data ...: [not set]
Signature PIN : forced
Key attributes ...: 4096R 4096R 4096R
Max. PIN lengths .: 32 32 32
PIN retry counter : 3 0 3
Signature counter : 8
Signature key : 291E 79A1 DC55 AE27 A52E  EF83 5C1E C404 D590 6629
  created : 2015-04-26 16:01:24
Encryption key: 0539 428D 4EF7 FF24 FE16  C291 6B09 0693 1454 9D4B
  created : 2013-07-02 17:04:50
Authentication key: EEFB 8D7C 6E3F 401C 4820  FFB2 85FD F561 DA8C 0C46
  created : 2015-04-26 16:18:28
General key info..: pub  4096R/0x5C1EC404D5906629 2015-04-26 Andrew Gallagher
andr...@andrewg.com
sec#  4096R/0xFB73E21AF1163937  created: 2013-07-02  expires: 2017-01-20
ssb  4096R/0x6B09069314549D4B  created: 2013-07-02  expires: 2017-04-25
  card-no: 0005 2ED9
ssb  4096R/0x5C1EC404D5906629  created: 2015-04-26  expires: 2017-04-25
  card-no: 0005 2ED9
ssb  4096R/0x85FDF561DA8C0C46  created: 2015-04-26  expires: 2017-04-25
  card-no: 0005 2ED9
agallagher@itchy:~$ opensc-tool -l
# Detected readers (pcsc)
Nr.  Card  Features  Name
0Yes ACS ACR 38U-CCID 00 00
1No  Broadcom Corp 5880 [Contacted SmartCard] (0123456789ABCD)
01 00


The new reader ordering persists across USB unplugging.

Andrew.



-- System Information:
Debian Release: 8.0
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_IE.utf8, LC_CTYPE=en_IE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages pcscd depends on:
ii  init-system-helpers 1.22
ii  libc6   2.19-18
ii  libccid [pcsc-ifd-handler]  1.4.18-1
ii  libpcsclite11.8.13-1
ii  libudev1215-17
ii  lsb-base4.1+Debian13+nmu1

pcscd recommends no packages.

Versions of packages pcscd suggests:
ii  systemd  215-17

-- no debconf information

The information in this email and any attachments contain confidential 
information and is intended only for the individual named. If you are not the 
named addressee you should not disseminate, distribute or copy this e-mail, the 
attachments or any part thereof. Please notify the sender immediately by e-mail 
if you have received this e-mail by mistake and delete this e-mail from your 
system. E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late or 
incomplete, or contain viruses. The sender therefore does not accept liability 
for any errors or omissions in the contents of this message which arise as a 
result of e-mail transmission. If verification is required please request a 
hard-copy version. Unless expressly stated, this email is not intended to 
create any contractual relationship. If this email is not sent in the course of 
the senders employment or fulfilment of his/her duties to Ward Solutions, Ward 
Solutions accepts no liability whatsoever for the content of this message or 
any attachment(s). Ward Solutions Ltd. Registered in Republic of Ireland at 
2054 Castle Drive, CityWest Business Campus, Dublin 24 Reg. No. 316165. 


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#783703: pcscd needs to be restarted after first plugging of usb card reader

2015-04-29 Thread Andrew Gallagher
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Thanks.

Unfortunately I can't put the card in the broadcom reader as it's a
full size card reader and I've already chopped out the small format
card. The correct fix would appear to be the only recourse...

Andrew.

On 29/04/15 12:59, Ludovic Rousseau wrote:
 reassign  783703gnupg2 retitle 783703 do not just use the first
 PC/SC smart card reader tags783703 upstream thank
 
 Hello,
 
 The problem is that gpg2 does not allow to specify a smart card
 reader to use if you have 2 or more readers.
 
 What you can do is insert your GPG card in the integrated Broadcom
 Corp 5880 reader, or in fact in the first reader listes by pcscd.
 
 A correct fix would be for GPG to try to find the GPG card in any 
 present reader, not just the first one.
 
 I reassign the bug tognupg2.
 
 Bye
 
 Le 29/04/2015 12:18, Andrew Gallagher a écrit :
 Package: pcscd Version: 1.8.13-1 Severity: important
 
 I am using an ACS card reader with openpgp smart card. It was
 working until I rebooted, and then gnupg stopped recognising the
 card. Restarting pcscd with the ACS reader plugged in fixed the
 problem, and the fix persists even after I unplug/replug the usb
 reader.
 
 The symptoms and workaround appear identical to this fedora bug:
 
 https://bugzilla.redhat.com/show_bug.cgi?id=1092207
 
 I noticed the same behaviour with the ordering of card readers
 before and after pcscd restarts that the fedora OP reports:
 
 agallagher@itchy:~$ gpg2 --card-status gpg: selecting openpgp
 failed: Card not present gpg: OpenPGP card not available: Card
 not present agallagher@itchy:~$ opensc-tool -l # Detected readers
 (pcsc) Nr.  Card  Features  Name 0No  Broadcom
 Corp 5880 [Contacted SmartCard] (0123456789ABCD) 00 00 1Yes
 ACS ACR 38U-CCID 01 00 agallagher@itchy:~$ sudo service pcscd
 restart [ ok ] Restarting PCSC Lite resource manager: pcscd. 
 agallagher@itchy:~$ gpg2 --card-status Application ID ...:
 D27600012401020100052ED9 Version ..: 2.1 
 Manufacturer .: ZeitControl Serial number : 2ED9 Name
 of cardholder: Andrew Gallagher Language prefs ...: en Sex
 ..: unspecified URL of public key :
 http://xen.andrewg.com/andr...@andrewg.com.pub Login data
 ...: [not set] Signature PIN : forced Key attributes ...:
 4096R 4096R 4096R Max. PIN lengths .: 32 32 32 PIN retry counter
 : 3 0 3 Signature counter : 8 Signature key : 291E 79A1 DC55
 AE27 A52E  EF83 5C1E C404 D590 6629 created : 2015-04-26
 16:01:24 Encryption key: 0539 428D 4EF7 FF24 FE16  C291 6B09
 0693 1454 9D4B created : 2013-07-02 17:04:50 Authentication
 key: EEFB 8D7C 6E3F 401C 4820  FFB2 85FD F561 DA8C 0C46 created
 : 2015-04-26 16:18:28 General key info..: pub
 4096R/0x5C1EC404D5906629 2015-04-26 Andrew Gallagher 
 andr...@andrewg.com sec#  4096R/0xFB73E21AF1163937  created:
 2013-07-02  expires: 2017-01-20 ssb  4096R/0x6B09069314549D4B
 created: 2013-07-02  expires: 2017-04-25 card-no: 0005 2ED9 
 ssb  4096R/0x5C1EC404D5906629  created: 2015-04-26  expires:
 2017-04-25 card-no: 0005 2ED9 ssb  4096R/0x85FDF561DA8C0C46
 created: 2015-04-26  expires: 2017-04-25 card-no: 0005 2ED9 
 agallagher@itchy:~$ opensc-tool -l # Detected readers (pcsc) Nr.
 Card  Features  Name 0Yes ACS ACR 38U-CCID 00 00 
 1No  Broadcom Corp 5880 [Contacted SmartCard] 
 (0123456789ABCD) 01 00
 
 
 The new reader ordering persists across USB unplugging.
 
 Andrew.
 
 
 
 -- System Information: Debian Release: 8.0 APT prefers
 stable-updates APT policy: (500, 'stable-updates'), (500,
 'stable') Architecture: amd64 (x86_64)
 
 Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores) Locale:
 LANG=en_IE.utf8, LC_CTYPE=en_IE.utf8 (charmap=UTF-8) Shell:
 /bin/sh linked to /bin/dash Init: sysvinit (via /sbin/init)
 
 Versions of packages pcscd depends on: ii  init-system-helpers
 1.22 ii  libc6   2.19-18 ii  libccid
 [pcsc-ifd-handler]  1.4.18-1 ii  libpcsclite1
 1.8.13-1 ii  libudev1215-17 ii  lsb-base
 4.1+Debian13+nmu1
 
 pcscd recommends no packages.
 
 Versions of packages pcscd suggests: ii  systemd  215-17
 
 -- no debconf information
 
 The information in this email and any attachments contain
 confidential information and is intended only for the individual
 named. If you are not the named addressee you should not
 disseminate, distribute or copy this e-mail, the attachments or
 any part thereof. Please notify the sender immediately by e-mail
 if you have received this e-mail by mistake and delete this
 e-mail from your system. E-mail transmission cannot be guaranteed
 to be secure or error-free as information could be intercepted,
 corrupted, lost, destroyed, arrive late or incomplete, or contain
 viruses. The sender therefore does not accept liability for any
 errors or omissions in the contents of this message which arise
 as a result of e-mail transmission. If verification is required
 

Bug#783703: pcscd needs to be restarted after first plugging of usb card reader

2015-04-29 Thread Ludovic Rousseau

reassign  783703gnupg2
retitle 783703 do not just use the first PC/SC smart card reader
tags783703 upstream
thank

Hello,

The problem is that gpg2 does not allow to specify a smart card reader to use 
if you have 2 or more readers.

What you can do is insert your GPG card in the integrated Broadcom Corp 5880 
reader, or in fact in the first reader listes by pcscd.

A correct fix would be for GPG to try to find the GPG card in any present 
reader, not just the first one.

I reassign the bug tognupg2.

Bye

Le 29/04/2015 12:18, Andrew Gallagher a écrit :

Package: pcscd
Version: 1.8.13-1
Severity: important

I am using an ACS card reader with openpgp smart card. It was working until I
rebooted, and then gnupg stopped recognising the card. Restarting pcscd with
the ACS reader plugged in fixed the problem, and the fix persists even after I
unplug/replug the usb reader.

The symptoms and workaround appear identical to this fedora bug:

https://bugzilla.redhat.com/show_bug.cgi?id=1092207

I noticed the same behaviour with the ordering of card readers before and after
pcscd restarts that the fedora OP reports:

agallagher@itchy:~$ gpg2 --card-status
gpg: selecting openpgp failed: Card not present
gpg: OpenPGP card not available: Card not present
agallagher@itchy:~$ opensc-tool -l
# Detected readers (pcsc)
Nr.  Card  Features  Name
0No  Broadcom Corp 5880 [Contacted SmartCard] (0123456789ABCD)
00 00
1Yes ACS ACR 38U-CCID 01 00
agallagher@itchy:~$ sudo service pcscd restart
[ ok ] Restarting PCSC Lite resource manager: pcscd.
agallagher@itchy:~$ gpg2 --card-status
Application ID ...: D27600012401020100052ED9
Version ..: 2.1
Manufacturer .: ZeitControl
Serial number : 2ED9
Name of cardholder: Andrew Gallagher
Language prefs ...: en
Sex ..: unspecified
URL of public key : http://xen.andrewg.com/andr...@andrewg.com.pub
Login data ...: [not set]
Signature PIN : forced
Key attributes ...: 4096R 4096R 4096R
Max. PIN lengths .: 32 32 32
PIN retry counter : 3 0 3
Signature counter : 8
Signature key : 291E 79A1 DC55 AE27 A52E  EF83 5C1E C404 D590 6629
   created : 2015-04-26 16:01:24
Encryption key: 0539 428D 4EF7 FF24 FE16  C291 6B09 0693 1454 9D4B
   created : 2013-07-02 17:04:50
Authentication key: EEFB 8D7C 6E3F 401C 4820  FFB2 85FD F561 DA8C 0C46
   created : 2015-04-26 16:18:28
General key info..: pub  4096R/0x5C1EC404D5906629 2015-04-26 Andrew Gallagher
andr...@andrewg.com
sec#  4096R/0xFB73E21AF1163937  created: 2013-07-02  expires: 2017-01-20
ssb  4096R/0x6B09069314549D4B  created: 2013-07-02  expires: 2017-04-25
   card-no: 0005 2ED9
ssb  4096R/0x5C1EC404D5906629  created: 2015-04-26  expires: 2017-04-25
   card-no: 0005 2ED9
ssb  4096R/0x85FDF561DA8C0C46  created: 2015-04-26  expires: 2017-04-25
   card-no: 0005 2ED9
agallagher@itchy:~$ opensc-tool -l
# Detected readers (pcsc)
Nr.  Card  Features  Name
0Yes ACS ACR 38U-CCID 00 00
1No  Broadcom Corp 5880 [Contacted SmartCard] (0123456789ABCD)
01 00


The new reader ordering persists across USB unplugging.

Andrew.



-- System Information:
Debian Release: 8.0
   APT prefers stable-updates
   APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.16.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_IE.utf8, LC_CTYPE=en_IE.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages pcscd depends on:
ii  init-system-helpers 1.22
ii  libc6   2.19-18
ii  libccid [pcsc-ifd-handler]  1.4.18-1
ii  libpcsclite11.8.13-1
ii  libudev1215-17
ii  lsb-base4.1+Debian13+nmu1

pcscd recommends no packages.

Versions of packages pcscd suggests:
ii  systemd  215-17

-- no debconf information

The information in this email and any attachments contain confidential 
information and is intended only for the individual named. If you are not the 
named addressee you should not disseminate, distribute or copy this e-mail, the 
attachments or any part thereof. Please notify the sender immediately by e-mail 
if you have received this e-mail by mistake and delete this e-mail from your 
system. E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late or 
incomplete, or contain viruses. The sender therefore does not accept liability 
for any errors or omissions in the contents of this message which arise as a 
result of e-mail transmission. If verification is required please request a 
hard-copy version. Unless expressly stated, this email is not intended to 
create any contractual relationship. If this email is not sent in the course of 
the senders employment or fulfilment of his/her duties to Ward Solut

i
ons, Ward 

Bug#783703: Info received (Bug#783703: pcscd needs to be restarted after first plugging of usb card reader)

2015-04-29 Thread Andrew Gallagher
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

It's not just the ordering of readers that is the issue. I ran across
this problem just now:

https://paulphilippov.com/articles/how-to-fix-device-not-accepting-address-error

... so plugged the ACS reader into a docking station port, thinking it
would be able to supply more power. The ACS reader started working
again, but even though it is still the first reader in the list, gpg2
can't talk to it:

dmesg output:

[34471.749264] usb 2-1.4: new full-speed USB device number 22 using
ehci-pci
[34471.821260] usb 2-1.4: device descriptor read/64, error -32
[34471.997172] usb 2-1.4: device descriptor read/64, error -32
[34472.173381] usb 2-1.4: new full-speed USB device number 23 using
ehci-pci
[34472.245303] usb 2-1.4: device descriptor read/64, error -32
[34472.421236] usb 2-1.4: device descriptor read/64, error -32
[34472.597175] usb 2-1.4: new full-speed USB device number 24 using
ehci-pci
[34473.002996] usb 2-1.4: device not accepting address 24, error -32
[34473.077029] usb 2-1.4: new full-speed USB device number 25 using
ehci-pci
[34473.482909] usb 2-1.4: device not accepting address 25, error -32
[34473.484910] usb 2-1-port4: unable to enumerate USB device
[34765.026312] usb 1-1.1.2: new full-speed USB device number 9 using
ehci-pci
[34765.121888] usb 1-1.1.2: New USB device found, idVendor=072f,
idProduct=90cc
[34765.121898] usb 1-1.1.2: New USB device strings: Mfr=1, Product=2,
SerialNumber=0
[34765.121903] usb 1-1.1.2: Product: CCID USB Reader
[34765.121907] usb 1-1.1.2: Manufacturer: ACS


agallagher@itchy:~$ opensc-tool -l
# Detected readers (pcsc)
Nr.  Card  Features  Name
0Yes ACS ACR 38U-CCID 00 00
1No  Broadcom Corp 5880 [Contacted SmartCard]
(0123456789ABCD) 01 00
agallagher@itchy:~$ gpg2 --card-status
gpg: selecting openpgp failed: Card not present
gpg: OpenPGP card not available: Card not present
agallagher@itchy:~$ opensc-explorer
OpenSC Explorer version 0.14.0
Using reader with a card: ACS ACR 38U-CCID 00 00
OpenSC [3F00] ls
FileID  Type  Size
 004FwEF16
 005EwEF 0
[0065]DF28
[006E]DF   217
[007A]DF 5
 00C4wEF 7
 0101wEF 0
 0102wEF 0
 5F50wEF46
 5F52wEF10
 7F21wEF 0
[A400]DF   527
 A401wEF   527
[B600]DF   527
 B601wEF   527
[B800]DF   527
 B801wEF   527


Unfortunately it seems that since kernel 2.6.38 there is no longer a
reliable way to cut power to an internal USB device, so I can now only
use my PGP card with a 50% success rate on this machine - short of
cracking open the case and disconnecting the internal broadcom reader.

This basically screws my intended use of this PGP card.

- -- 
Andrew Gallagher
Internetworking and Security Engineer, Ward Solutions Ltd.
Unit 2054 Castle Drive, Citywest, Dublin 24
+353 87 1200174
-BEGIN PGP SIGNATURE-

iQEcBAEBCgAGBQJVQOmCAAoJENW/k7AUpJcAra4H/2OdYKakHJ1DsQOPvrc9prJ6
juiiXV+EqiBjpA32gbZUUjbGv/bW8MfylkXic0cJAWikFsvJAMvAB016F3Y6O2rK
jbLgvD/hhBWjHn6KjanjvmgyML5XTtYSGbWN1D00ojvOzlclWDaJo0CnCLyRz6Us
nwVPJXPDx85OLAy9jSvuVjse9Z+AxkgaxMbetbJHkJ0CLC1Ni4HtXueAIejYx57C
o/RvR+CyyizJFXSwRRaVanR7fu10CZCHXs+G2fYf3MGlIhp6UC+ArdK7X73UAkYW
TiVqJS6cd+zS1h1vE3D7z8bRg5tcV9OK9iyMKmMZSJULMD6fp+EnBvBaL3nemaA=
=p5nQ
-END PGP SIGNATURE-

The information in this email and any attachments contain confidential 
information and is intended only for the individual named. If you are not the 
named addressee you should not disseminate, distribute or copy this e-mail, the 
attachments or any part thereof. Please notify the sender immediately by e-mail 
if you have received this e-mail by mistake and delete this e-mail from your 
system. E-mail transmission cannot be guaranteed to be secure or error-free as 
information could be intercepted, corrupted, lost, destroyed, arrive late or 
incomplete, or contain viruses. The sender therefore does not accept liability 
for any errors or omissions in the contents of this message which arise as a 
result of e-mail transmission. If verification is required please request a 
hard-copy version. Unless expressly stated, this email is not intended to 
create any contractual relationship. If this email is not sent in the course of 
the senders employment or fulfilment of his/her duties to Ward Solutions, Ward 
Solutions accepts no liability whatsoever for the content of this message or 
any attachment(s). Ward Solutions Ltd. Registered in Republic of Ireland at 
2054 Castle Drive, CityWest Business Campus, Dublin 24 Reg. No. 316165.