OpenPGP card stopped working

[Micah Anderson]

Michel Messerschmidt <lists at michel-messerschmidt.de> writes:

> On Wed, Apr 23, 2008 at 07:36:47PM -0400, Micah Anderson wrote:
>> >From what I can tell, none of those packages should have any affect on
>> the card itself, but I am no expert in this matter.
>> 
>> Although it sounds like you just had to reboot, and things worked
>> fine. I'm still unable to access my card.
>
> Just updated my Debian Lenny system this morning, but the cardman 4040
> is still working with gpg and gpg2.
> But I noticed, that mail signing fails with a similar error, if I just 
> start the mail client. After executing "gpg --card-status" in another
> terminal, everything works fine.
>
> Can you post some configuration details ?
>
>
> $ pccardctl info
> PRODID_1="OMNIKEY"
> PRODID_2="CardMan 4040"
> PRODID_3=""
> PRODID_4=""
> MANFID=0223,0200
> FUNCID=255
> $ pccardctl status
> Socket 0:
>   5.0V 16-bit PC Card
>   Subdevice 0 (function 0) bound to driver "cm4040_cs"


# pccardctl info
PRODID_1="OMNIKEY"
PRODID_2="CardMan 4040"
PRODID_3=""
PRODID_4=""
MANFID=0223,0200
FUNCID=255
PRODID_1=""
PRODID_2=""
PRODID_3=""
PRODID_4=""
MANFID=0000,0000
FUNCID=255

> $ cat /etc/udev/gnupg-ccid.rules 
> # CardMan 4040 (PCMCIA device)
> ACTION=="add", SUBSYSTEM=="cardman_4040", GROUP="scard", MODE="0660"

My rules are in /etc/udev/rules.d/45-gnupg-ccid.rules and are as
follows:

# cat 45-gnupg-ccid.rules 

## Omnikey CardMan 4040
ACTION=="add", SUBSYSTEM=="cardman_4040", GROUP="scard", MODE="0660"

Interestingly, I had also these rules:

z60_openct.rules:
# omnikey cardman 4040
SUBSYSTEM=="cardman_4040", RUN+="/lib/udev/openct_pcmcia"

Due to having libopenct1 openct packages installed. I removed those as
they are not needed and I wanted to make sure they weren't interfering.

> Package version should be the same in sid and lenny at the moment:
> ii  gnupg               1.4.6-2.1           GNU privacy guard - a free PGP replacement
> ii  gnupg2              2.0.9-1             GNU privacy guard - a free PGP replacement
> ii  gpgv                1.4.6-2.1           GNU privacy guard - signature verification tool
> ii  hal                 0.5.11~rc2-1        Hardware Abstraction Layer
> ii  libccid             1.3.5-1             PC/SC driver for USB CCID smart card readers
> ii  libgcrypt11         1.4.0-3             LGPL Crypto library - runtime library
> ii  libgpg-error0       1.4-2               library for common error values and messages in GnuPG 
> ii  libpcsclite1        1.4.100-3           Middleware to access a smart card using PC/SC (library
> ii  udev                0.114-2             /dev/ and hotplug management daemon

This is what I have:
ii  gnupg                 1.4.6-2.1           GNU privacy guard - a free PGP replacement
un  gnupg2                <none>              (no description available)
ii  gpgv                  1.4.6-2.1           GNU privacy guard - signature verification tool
ii  hal                   0.5.11~rc2-1        Hardware Abstraction Layer
un  libccid               <none>              (no description available)
ii  libgcrypt11           1.4.0-3             LGPL Crypto library - runtime library
ii  libgpg-error0         1.4-2               library for common error values and messages in GnuPG components
ii  libpcsclite1          1.4.100-2           Middleware to access a smart card using PC/SC (library)
ii  udev                  0.114-2             /dev/ and hotplug management daemon

It was my understanding that libccid was not installed, because gnupg
has its own implementation, and gnupg2 is similarly not required,
although I have some of the binary packages built from the gnupg2
package, such as gpg-agent, installed. Just to make sure, I installed
libccid (1.3.5-1) and gnupg2 (2.0.9-1), which gets this set of packages
to the same as yours

I've also rebooted and have not had any luck, using kernel 2.6.24-1-686.

Micah