OpenPGP card problem
Fabrizio Furnari
fab.furnari at gmail.com
Tue Aug 4 00:22:13 CEST 2009
Hi to all,
I've just subscripted this list after a few days spent looking for a
solution to my problem:
I've just bought a OpenPGP card and a card reader (SCR 335) to use with my
Ubuntu 9.04 laptop.
I've installed the udev scripts, as explained in the fsfe howto (
http://wiki.fsfe.org/Card_howtos/Card_reader_setup_(udev)).
I've used gpg to set-up the first data on the card: Name, Language, PIN,
etc, but when I've tried to change the Admin PIN the behaviour of the
software became strange; mainly gpg doesn't want to change the PIN, nor the
Admin PIN.
I paste an example:
-----------------------------------------------------------------------------
gpg --change-pin
gpg: detected reader `SCM SCR 335 00 00'
gpg: OpenPGP card no. D27600012401020000050XXXXXXXXXXXXXXXX detected
1 - change PIN
2 - unblock PIN
3 - change Admin PIN
Q - quit
Your selection? 1
PIN
New PIN
New PIN
Error changing the PIN: invalid argument
---------------------------------------------------------------------------------
I'm sure the pin is correct...if I try to unblock it I this:
---------------------------------------------------------------------------------
gpg: 3 Admin PIN attempts remaining before card is permanently locked
Admin PIN
New PIN
New PIN
Error unblocking the PIN: general error
---------------------------------------------------------------------------------
Also i I try to change the admin PIN (wich is still the default one) I
obtain a "invalid argument"...
I suspect that gpg wants to change the CHV2 PIN, in fact if I intentionally
put in a wrong (alphabetic) pin I obtain:
--------------------------------------------------------------------------------
PIN
gpg: PIN for CHV2 is too short; minimum length is 6
Error changing the PIN: bad passphrase
--------------------------------------------------------------------------------
and if I try with gpg --card-status this is a strange line:
--------------------------------------------------------------------------------
...
PIN retry counter : 3 0 3
--------------------------------------------------------------------------------
Should be 3 3 3, is that correct?
I don't know what to do, what do you think about?
These are the packages installed on my linux box:
ii gnupg 1.4.9-3ubuntu1
rc gnupg-agent 2.0.9-3.1
ii gnupg-pkcs11-scd 0.06-4
ii python-gnupginterface
Many thanks,
Fabrizio
--
@P=split//,".URRUU\c8R";@d=split//,"\niranruF oizirbaF";sub p{
@p{"r$p","u$p"}=(P,P);pipe"r$p","u$p";++$p;($q*=2)+=$f=!fork;map{$P=$P[$f^ord
($p{$_})&6];$p{$_}=/
^$P/ix?$P:close$_}keys%p}p;p;p;p;p;map{$p{$_}=~/^[P.]/&&
close$_}%p;wait until$?;map{/^r/&&<$_>}%p;$_=$d[$q];sleep
rand(2)if/\S/;print
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </pipermail/attachments/20090804/23e359a6/attachment-0001.htm>
More information about the Gnupg-users
mailing list