Hi all,

I was wondering if it's possible to use a YubiKey 5 a bit more conveniently if 
trying to use more than one of its features.

When I have pcscd(8) running, e.g. gpg signing (SmartCard) works but I can't 
use e.g. challenge-response.
After stopping pcscd(8), I can use e.g. ykchalresp(1) (from ykpers) but e.g. 
OpenPGP can't find the key when trying to sign.

I think on Linux this is somehow managed by systemd with a socket activating 
pcscd(8) when needed, so it won't hog the device.

Am I trying to use this in the wrong way?


$ doas rcctl start pcscd
pcscd(ok)

$ doas ykinfo -a
USB error: Other/unknown error

$ doas ykchalresp -2 asdasd
USB error: Other/unknown error

$ doas ykman list
WARNING: No OTP HID backend available. OTP protocols will not function.
ERROR: Unable to list devices for connection
YubiKey 5 NFC (5.2.4) [OTP+FIDO+CCID] Serial: 12354678


$ doas rcctl stop pcscd
pcscd(ok)

$ doas ykman list
WARNING: PC/SC not available. Smart card (CCID) protocols will not function.
ERROR: Unable to list devices for connection
WARNING: No OTP HID backend available. OTP protocols will not function.
ERROR: Unable to list devices for connection
YubiKey 5 NFC (5.2.4) [OTP+FIDO+CCID] Serial: 12354678

$ doas ykinfo -a
serial: 123456
serial_hex: abcdef
serial_modhex: abcdef
version: 5.2.4
touch_level: 1287
programming_sequence: 3
slot1_status: 1
slot2_status: 1
vendor_id: 1050
product_id: 407



Daniel

Reply via email to