[prev in list] [next in list] [prev in thread] [next in thread] 

List:       gnupg-users
Subject:    about CCID USB readers (Re: setting GnuPG card to 'not forces' does not let sign)
From:       Matthias Apitz <guru () unixarea ! de>
Date:       2017-06-22 6:28:57
Message-ID: 20170622062857.GA2681 () c720-r314251
[Download RAW message or body]

[Attachment #2 (multipart/signed)]


El día lunes, junio 12, 2017 a las 12:58:23p. m. +0200, Werner Koch escribió:

> On Mon, 12 Jun 2017 12:38, guru@unixarea.de said:
> 
> > Do you know of any other CCID reader for ID-000 size cards?
> 
> I have a sample of the Gemalto Shell Token here.  It has been around for
> quite some time and the kernelconcept folks that it works nicely.  See
> 
>   https://www.floss-shop.de/en/security-privacy/
> 
> On that page you also find the a bit more expensive uTrust token which
> would be my preferred choice. I used it for many years until it broke due
> to my fault.  In fact I recycled the case for my gnuk token.

Some days ago I acquired this uTrust token. And surprise, surprise, it
showed the same symptoms as the other one, the HID Global OMNIKEY 6121
Smart Card Reader: My operating system does not always recognises the
USB device, not even when plug'ed in before power-on. This smells
somehow as a hardware issue in the Acer C720 or in the kernel of the
FreeBSD (and I do run CURRENT on it, i.e. compiled directly from SVN).
Here is the bug issue I filed against our beloved FreeBSD:
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=220127
Only if someone has similar experiences.

I tested a lot with this issue and now have some trick which seems to
make it at least less often fail: I insert the uTrust token before
power-on, start the laptop but hold the boot in the moment when you can
modify certain boot options, i.e. the device is powered on but awaiting
a keyboard input to continue loading the kernel. Only a few seconds.
Then the booting kernel sees the device as:

ugen0.2: <Identiv uTrust 3512 SAM slot Token> at usbus0

Is there something in the cards firmware which needs some time to come
up?

	matthias


-- 
Matthias Apitz, ✉ guru@unixarea.de, ⌂ http://www.unixarea.de/  ☎ +49-176-38902045
Public GnuPG key: http://www.unixarea.de/key.pub
8. Mai 1945: Wer nicht feiert hat den Krieg verloren.
8 de mayo de 1945: Quien no festeja perdió la Guerra.
May 8, 1945: Who does not celebrate lost the War.

["signature.asc" (application/pgp-signature)]

_______________________________________________
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


[prev in list] [next in list] [prev in thread] [next in thread]