Smart card signing failure

David Shaw dshaw at jabberwocky.com
Sun Jan 1 18:27:10 CET 2006


On Sat, Dec 31, 2005 at 03:57:41AM -0700, Kurt Fitzner wrote:
> I have solved my own problem.  If the gpg.conf has a setting for
> personal-digest-preferences, and if an algo that is supported by a
> smartcard is not first in the list, then GnuPG will fail with any
> signing operation made with a smartcard.
> 
> For example, my gpg.conf setting was:
> 
>   personal-digest-preferences SHA256 SHA384 SHA512
> 
> This was causing gnupg to fail with all signing operations.  I don't
> know whether or not this is a bug, or just an error message that is too
> cryptic.

A little of both.  GPG should give a better error message if you try
to sign with a hash the card does not support, but
personal-digest-preferences should not have selected a hash that the
card doesn't support in the first place.

Fixed for 1.4.3, thanks!

David



More information about the Gnupg-users mailing list