Bug 2070950

Summary:	Yubikey 4/5 not working after libusbx update
Product:	Red Hat Enterprise Linux 9	Reporter:	Daniel Uvehag <ufven+fedora>
Component:	libusbx	Assignee:	Benjamin Berg <bberg>
Status:	CLOSED DUPLICATE	QA Contact:	Kernel-QE - Hardware <kernel-qe-hw>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	CentOS Stream	CC:	bstinson, jwboyer
Target Milestone:	rc	Flags:	pm-rhel: mirror+
Target Release:	---
Hardware:	x86_64
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2022-04-01 12:38:25 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Daniel Uvehag 2022-04-01 12:02:33 UTC

Description of problem:

After installing CentOS Stream 9 20220302.0 and updating all packages, pcscd is no longer able to detect Yubikey security keys. My initial findings seem to point out libusbx to be the cause of this. Downgrading from libusbx-1.0.25-2.el9.x86_64 to libusbx-1.0.24-4.el9.x86_64 makes pcscd able to detect the Yubikey again.

Version-Release number of selected component (if applicable):

libusbx-1.0.25-2.el9.x86_64

How reproducible:

Every time. This has been tested on two different physical computers.

Steps to Reproduce:
1. Install CentOS Stream 9 20220302.0 with Smart Card Support.
2. Update the installation using dnf update.
3. Insert a Yubikey.
4. Check the status of pcscd.

Actual results:

# systemctl status pcscd.service
...
Apr 01 11:39:07 testmachine pcscd[2366]: 00000000 ccid_usb.c:863:WriteUSB() write failed (1/6): -4 LIBUSB_ERROR_NO_DEVICE

# p11tool --list-tokens
(Expected token not shown)

Expected results:
# systemctl status pcscd.service
(No errors)

# p11tool --list-tokens
...
Token 2:
	URL: pkcs11:model=PKCS%2315%20emulated;manufacturer=piv_II;serial=<REDACTED>;token=John%20Doe
	Label: John Doe
	Type: Hardware token
	Flags: RNG, Requires login
	Manufacturer: piv_II
	Model: PKCS#15 emulated
	Serial: <REDACTED>
	Module: opensc-pkcs11.so


Additional info:

Downgrading libusbx back to 1.0.24-4 makes the Yubikey available again.

Comment 1 Daniel Uvehag 2022-04-01 12:04:50 UTC

I tested this on Red Hat Enterprise Linux 9.0 Beta as well, and the same issue appears there.

This was all tested on physical hardware (one laptop, and two desktops).

Comment 2 Benjamin Berg 2022-04-01 12:38:25 UTC


*** This bug has been marked as a duplicate of bug 2058730 ***