<div dir="auto">Help </div><div dir="auto">Unsubscribe </div><div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, Jun 24, 2022 at 6:21 PM <<a href="mailto:gnupg-users-request@gnupg.org">gnupg-users-request@gnupg.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Send Gnupg-users mailing list submissions to<br>
<a href="mailto:gnupg-users@gnupg.org" target="_blank">gnupg-users@gnupg.org</a><br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
<a href="https://lists.gnupg.org/mailman/listinfo/gnupg-users" rel="noreferrer" target="_blank">https://lists.gnupg.org/mailman/listinfo/gnupg-users</a><br>
or, via email, send a message with subject or body 'help' to<br>
<a href="mailto:gnupg-users-request@gnupg.org" target="_blank">gnupg-users-request@gnupg.org</a><br>
<br>
You can reach the person managing the list at<br>
<a href="mailto:gnupg-users-owner@gnupg.org" target="_blank">gnupg-users-owner@gnupg.org</a><br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of Gnupg-users digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. Re: loopback issue signing git commits (?ngel)<br>
2. gpa.exe hungs when click on "smartcards" AND scdaemon cannot<br>
recognise SC-HSM (Minas Argyrou)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Fri, 24 Jun 2022 02:02:47 +0200<br>
From: ?ngel <<a href="mailto:angel@pgp.16bits.net" target="_blank">angel@pgp.16bits.net</a>><br>
To: <a href="mailto:gnupg-users@gnupg.org" target="_blank">gnupg-users@gnupg.org</a><br>
Subject: Re: loopback issue signing git commits<br>
Message-ID:<br>
<<a href="mailto:b87255e7a26e9e345f464583965e7bf840dc5f1c.camel@16bits.net" target="_blank">b87255e7a26e9e345f464583965e7bf840dc5f1c.camel@16bits.net</a>><br>
Content-Type: text/plain; charset="ISO-8859-15"<br>
<br>
On 2022-06-18 at 02:14 +0200, GH wrote:<br>
> Hi,<br>
> <br>
> I use gnupg in a remote server, I connect to via ssh<br>
> <br>
> I config gnupg as loopback, it ask me my gpg passwd in the command<br>
> line or in my emacs minibuffer when I use magit<br>
> <br>
> but when I commit in git, I sign my commits, but gpg ask me the<br>
> passwd<br>
> with GUI pinentry (in the remote server)<br>
> <br>
> In remote ssh connection I cant insert that password<br>
> <br>
> please, help<br>
<br>
What's the full gpg command line being run by git? I suspect it may be<br>
overriding some setting.<br>
Rather than using loopback to read it, I think it might be more<br>
apprpopriate to configure it to use pinentry-curses<br>
<br>
Regards<br>
<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Fri, 24 Jun 2022 20:47:55 +0000<br>
From: Minas Argyrou <<a href="mailto:minasargyrou@outlook.com" target="_blank">minasargyrou@outlook.com</a>><br>
To: "<a href="mailto:gnupg-users@gnupg.org" target="_blank">gnupg-users@gnupg.org</a>" <<a href="mailto:gnupg-users@gnupg.org" target="_blank">gnupg-users@gnupg.org</a>><br>
Cc: Minas Argyrou <<a href="mailto:minasargyrou@outlook.com" target="_blank">minasargyrou@outlook.com</a>><br>
Subject: gpa.exe hungs when click on "smartcards" AND scdaemon cannot<br>
recognise SC-HSM<br>
Message-ID:<br>
<<a href="mailto:AM6PR06MB443824203DCEC58FA7BBA26FC1B49@AM6PR06MB4438.eurprd06.prod.outlook.com" target="_blank">AM6PR06MB443824203DCEC58FA7BBA26FC1B49@AM6PR06MB4438.eurprd06.prod.outlook.com</a>><br>
<br>
Content-Type: text/plain; charset="utf-8"<br>
<br>
I am tring it get GnuPG to work with my SmartCard-HSM 4K on Windows, using the <br>
GP4Win bundle.<br>
<br>
Kleopatra doesn't recognise the SC-HSM 4K at all, even though, it DOES <br>
recognise the YubiKey 5 NFC in BOTH PIV and Openpgp Card apps.<br>
<br>
When trying to use the GPA.exe alternative, it just freezes when I click on <br>
the "smartcards" button; not sure if it's related.<br>
<br>
Trying to debug this, using CMD:<br>
<br>
scdaemon --server<br>
serialno<br>
<br>
I get the following result:<br>
<br>
<br>
> scdaemon[xxxxx]: detected reader 'ACS ACR38U 0' scdaemon[xxxxx]:<br>
> reader slot 0: not connected scdaemon[xxxxx]: pcsc_control failed:<br>
> invalid PC/SC error code (0x1) scdaemon[xxxxx]:<br>
> pcsc_vendor_specific_init: GET_FEATURE_REQUEST failed: 65547<br>
> scdaemon[xxxxx]: reader slot 0: active protocol: T1 scdaemon[xxxxx]:<br>
> slot 0: ATR=3bde18ff8191fe1fxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx<br>
> scdaemon[xxxxx]: error parsing PrKDF record: Invalid object<br>
> scdaemon[xxxxx]: no supported card application found: Invalid object S<br>
> PINCACHE_PUT 0// ERR 100696144 No such device <SCD><br>
<br>
Below I am including my configuration files.<br>
<br>
scdaemon.conf<br>
<br>
<br>
<br>
###+++--- GPGConf ---+++###<br>
verbose<br>
verbose<br>
verbose<br>
verbose<br>
verbose<br>
verbose<br>
verbose<br>
verbose<br>
verbose<br>
disable-ccid<br>
###+++--- GPGConf ---+++### 09/06/y22 23:29:33 GTB Daylight Time<br>
# GPGConf edited this configuration file.<br>
# It will disable options before this marked block, but it will<br>
# never change anything below these lines.<br>
<br>
#pcsc-shared<br>
<br>
I have tried all possible combinations with `disable-ccid` and `pcsc-shared` <br>
and nothing works.<br>
<br>
<br>
gpgagent.conf<br>
<br>
<br>
###+++--- GPGConf ---+++###<br>
enable-extended-key-format<br>
ignore-cache-for-signing<br>
no-allow-external-cache<br>
no-allow-loopback-pinentry<br>
grab<br>
pinentry-timeout 10<br>
verbose<br>
verbose<br>
verbose<br>
verbose<br>
verbose<br>
verbose<br>
verbose<br>
verbose<br>
verbose<br>
ssh-fingerprint-digest SHA384<br>
###+++--- GPGConf ---+++### 18/04/y22 07:30:51 GTB Daylight Time<br>
# GPGConf edited this configuration file.<br>
# It will disable options before this marked block, but it will<br>
# never change anything below these lines.<br>
<br>
enable-putty-support<br>
enable-ssh-support<br>
use-standard-socket<br>
default-cache-ttl 600<br>
max-cache-ttl 7200<br>
<br>
gpgsm.conf<br>
<br>
<br>
###+++--- GPGConf ---+++###<br>
auto-issuer-key-retrieve<br>
enable-crl-checks<br>
enable-ocsp<br>
verbose<br>
verbose<br>
verbose<br>
verbose<br>
verbose<br>
verbose<br>
verbose<br>
verbose<br>
verbose<br>
include-certs -1<br>
cipher-algo AES256<br>
###+++--- GPGConf ---+++### 01/04/y22 19:10:26 GTB Daylight Time<br>
# GPGConf edited this configuration file.<br>
# It will disable options before this marked block, but it will<br>
# never change anything below these lines.<br>
<br>
I was never able to get the SC-HSM to work with GnuPG, even though it is <br>
supposedly supported. This is the current time I am trying to figure it out. <br>
This time, I haven't played with anything else than scdaemon.conf, but, as far <br>
as I can tell, the SC-HSM didn't work even with the defaults on a fresh <br>
install.<br>
<br>
The card otherwise works nicely with everything else. Any help would be <br>
greatly appreciated!<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: <<a href="https://lists.gnupg.org/pipermail/gnupg-users/attachments/20220624/30971d48/attachment.html" rel="noreferrer" target="_blank">https://lists.gnupg.org/pipermail/gnupg-users/attachments/20220624/30971d48/attachment.html</a>><br>
-------------- next part --------------<br>
A non-text attachment was scrubbed...<br>
Name: smime.p7s<br>
Type: application/pkcs7-signature<br>
Size: 6027 bytes<br>
Desc: not available<br>
URL: <<a href="https://lists.gnupg.org/pipermail/gnupg-users/attachments/20220624/30971d48/attachment.bin" rel="noreferrer" target="_blank">https://lists.gnupg.org/pipermail/gnupg-users/attachments/20220624/30971d48/attachment.bin</a>><br>
<br>
------------------------------<br>
<br>
Subject: Digest Footer<br>
<br>
_______________________________________________<br>
Gnupg-users mailing list<br>
<a href="mailto:Gnupg-users@gnupg.org" target="_blank">Gnupg-users@gnupg.org</a><br>
<a href="https://lists.gnupg.org/mailman/listinfo/gnupg-users" rel="noreferrer" target="_blank">https://lists.gnupg.org/mailman/listinfo/gnupg-users</a><br>
<br>
<br>
------------------------------<br>
<br>
End of Gnupg-users Digest, Vol 225, Issue 8<br>
*******************************************<br>
</blockquote></div></div>