Bug 1535044

Summary: Add missing support for Nitrokey tokens
Product: Red Hat Enterprise Linux 7 Reporter: Jan Wildeboer <jwildebo>
Component: pcsc-lite-ccidAssignee: Bob Relyea <rrelyea>
Status: CLOSED ERRATA QA Contact: Asha Akkiangady <aakkiang>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.7CC: jwildebo, nmavrogi, rpattath
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: No Doc Update
Doc Text:
See https://bugzilla.redhat.com/show_bug.cgi?id=1558258
 Story Points: ---
Clone Of: Environment:
Last Closed: 2018-10-30 11:35:19 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1558258, 1561495    
Bug Blocks:    
Attachments:
Description Flags
info.plist with Nitrokey entries added none

Description Jan Wildeboer 2018-01-16 14:36:44 UTC 
Created attachment 1382037 [details]
info.plist with Nitrokey entries added

Description of problem:

The Nitrokey line of security tokens are not recognized by pcscd due to missing entries in the ccid device list.

Version-Release number of selected component (if applicable):

All

How reproducible:

Always

Steps to Reproduce:
1. Plug in any Nitrokey
2. Wait

Actual results:

Neither opensc-tool nor gpg --card-status show it

Expected results:

Card works and is recognized

Additional info:

Can be easily fixed by adding the missing 4 entries to

/lib64/pcsc/drivers/ifd-ccid.bundle/Contents/Info.plist

See https://www.nitrokey.com/documentation/installation#p:nitrokey-pro&os:linux

I have added

   <key>ifdVendorID</key>
   <array>
      <string>0x20A0</string>
      <string>0x20A0</string>
      <string>0x20A0</string>
      <string>0x20A0</string>

   <key>ifdProductID</key>
   <array>
      <string>0x4108</string>
      <string>0x4109</string>
      <string>0x4211</string>
      <string>0x4230</string>

   <key>ifdFriendlyName</key>
   <array>
      <string>Nitrokey Pro</string>
      <string>Nitrokey Storage</string>
      <string>Nitrokey Start</string>
      <string>Nitrokey HSM</string>

at the respective places and after that the tokens work.

I have attached the complete info.plist file as reference

AFAICS these entries were added in Fedora/Upstream quite some time ago.
Comment 2 Jan Wildeboer 2018-01-17 10:29:54 UTC 
Upstream support for Nitrokey was added december 2015 at

Nitrokey HSM:
https://github.com/LudovicRousseau/CCID/commit/b3dbc774e27521be80bb7089419bda0e83f58d5d

Nitrokey Pro:
https://github.com/LudovicRousseau/CCID/commit/87d1cf823355f1798ac1a21e0154a578d889b550

Nitrokey Start:
https://github.com/LudovicRousseau/CCID/commit/b5d3da3aa0faaca911522473a718bab6c02bad14

Nitrokey Storage:
https://github.com/LudovicRousseau/CCID/commit/21d4bc6963b47e1a7baf74b1818cb6c84d08eb05
Comment 5 Bob Relyea 2018-05-23 18:17:53 UTC 
fixed in pcsc-lite-ccid-1.4.10-13.1.el7.
Note, this is sanity only since I don't have the hardware.
Comment 6 Bob Relyea 2018-05-23 18:18:17 UTC 
oops forgot to set this to modified.
Comment 9 Roshni 2018-08-17 21:23:45 UTC 
[root@dhcp129-188 ~]# rpm -qi pcsc-lite-ccid
Name        : pcsc-lite-ccid
Version     : 1.4.10
Release     : 14.el7
Architecture: x86_64
Install Date: Tue 31 Jul 2018 10:05:43 AM EDT
Group       : System Environment/Libraries
Size        : 562872
License     : LGPLv2+
Signature   : RSA/SHA256, Thu 21 Jun 2018 05:26:59 PM EDT, Key ID 199e2f91fd431d51
Source RPM  : pcsc-lite-ccid-1.4.10-14.el7.src.rpm
Build Date  : Wed 23 May 2018 04:52:23 PM EDT
Build Host  : x86-020.build.eng.bos.redhat.com
Relocations : (not relocatable)
Packager    : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla>
Vendor      : Red Hat, Inc.
URL         : http://pcsclite.alioth.debian.org/ccid.html
Summary     : Generic USB CCID smart card reader driver

Sanity tests look good. Will mark it verified once the NEED_INFO is responded.
Comment 10 Roshni 2018-09-20 15:59:00 UTC 
Marking the bug verfied with sanity only because there is not response on the need_info yet.
Comment 12 errata-xmlrpc 2018-10-30 11:35:19 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2018:3256
Comment 13 Red Hat Bugzilla 2023-09-14 04:15:33 UTC 
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days