RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 1535044 - Add missing support for Nitrokey tokens
Summary: Add missing support for Nitrokey tokens
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: pcsc-lite-ccid
Version: 7.7
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: Bob Relyea
QA Contact: Asha Akkiangady
URL:
Whiteboard:
Depends On: 1558258 1561495
Blocks:
TreeView+ depends on / blocked
 
Reported: 2018-01-16 14:36 UTC by Jan Wildeboer
Modified: 2023-09-14 04:15 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: No Doc Update
Doc Text:
See https://bugzilla.redhat.com/show_bug.cgi?id=1558258
Clone Of:
Environment:
Last Closed: 2018-10-30 11:35:19 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)
info.plist with Nitrokey entries added (29.33 KB, application/xml)
2018-01-16 14:36 UTC, Jan Wildeboer 		no flags Details
View All


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2018:3256 0 None None None 2018-10-30 11:35:30 UTC

Description Jan Wildeboer 2018-01-16 14:36:44 UTC 
Created attachment 1382037 [details]
info.plist with Nitrokey entries added

Description of problem:

The Nitrokey line of security tokens are not recognized by pcscd due to missing entries in the ccid device list.

Version-Release number of selected component (if applicable):

All

How reproducible:

Always

Steps to Reproduce:
1. Plug in any Nitrokey
2. Wait

Actual results:

Neither opensc-tool nor gpg --card-status show it

Expected results:

Card works and is recognized

Additional info:

Can be easily fixed by adding the missing 4 entries to

/lib64/pcsc/drivers/ifd-ccid.bundle/Contents/Info.plist

See https://www.nitrokey.com/documentation/installation#p:nitrokey-pro&os:linux

I have added

   <key>ifdVendorID</key>
   <array>
      <string>0x20A0</string>
      <string>0x20A0</string>
      <string>0x20A0</string>
      <string>0x20A0</string>

   <key>ifdProductID</key>
   <array>
      <string>0x4108</string>
      <string>0x4109</string>
      <string>0x4211</string>
      <string>0x4230</string>

   <key>ifdFriendlyName</key>
   <array>
      <string>Nitrokey Pro</string>
      <string>Nitrokey Storage</string>
      <string>Nitrokey Start</string>
      <string>Nitrokey HSM</string>

at the respective places and after that the tokens work.

I have attached the complete info.plist file as reference

AFAICS these entries were added in Fedora/Upstream quite some time ago.
Comment 2 Jan Wildeboer 2018-01-17 10:29:54 UTC 
Upstream support for Nitrokey was added december 2015 at

Nitrokey HSM:
https://github.com/LudovicRousseau/CCID/commit/b3dbc774e27521be80bb7089419bda0e83f58d5d

Nitrokey Pro:
https://github.com/LudovicRousseau/CCID/commit/87d1cf823355f1798ac1a21e0154a578d889b550

Nitrokey Start:
https://github.com/LudovicRousseau/CCID/commit/b5d3da3aa0faaca911522473a718bab6c02bad14

Nitrokey Storage:
https://github.com/LudovicRousseau/CCID/commit/21d4bc6963b47e1a7baf74b1818cb6c84d08eb05
Comment 5 Bob Relyea 2018-05-23 18:17:53 UTC 
fixed in pcsc-lite-ccid-1.4.10-13.1.el7.
Note, this is sanity only since I don't have the hardware.
Comment 6 Bob Relyea 2018-05-23 18:18:17 UTC 
oops forgot to set this to modified.
Comment 9 Roshni 2018-08-17 21:23:45 UTC 
[root@dhcp129-188 ~]# rpm -qi pcsc-lite-ccid
Name        : pcsc-lite-ccid
Version     : 1.4.10
Release     : 14.el7
Architecture: x86_64
Install Date: Tue 31 Jul 2018 10:05:43 AM EDT
Group       : System Environment/Libraries
Size        : 562872
License     : LGPLv2+
Signature   : RSA/SHA256, Thu 21 Jun 2018 05:26:59 PM EDT, Key ID 199e2f91fd431d51
Source RPM  : pcsc-lite-ccid-1.4.10-14.el7.src.rpm
Build Date  : Wed 23 May 2018 04:52:23 PM EDT
Build Host  : x86-020.build.eng.bos.redhat.com
Relocations : (not relocatable)
Packager    : Red Hat, Inc. <http://bugzilla.redhat.com/bugzilla>
Vendor      : Red Hat, Inc.
URL         : http://pcsclite.alioth.debian.org/ccid.html
Summary     : Generic USB CCID smart card reader driver

Sanity tests look good. Will mark it verified once the NEED_INFO is responded.
Comment 10 Roshni 2018-09-20 15:59:00 UTC 
Marking the bug verfied with sanity only because there is not response on the need_info yet.
Comment 12 errata-xmlrpc 2018-10-30 11:35:19 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2018:3256
Comment 13 Red Hat Bugzilla 2023-09-14 04:15:33 UTC 
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days
Note You need to log in before you can comment on or make changes to this bug.