Page MenuHomePureOS Tracker

libccid does not recognize Librem Key (opencs, opencs-pkcs11)
Open, NormalPublic

Description

libccid (https://packages.debian.org/buster/libccid) uses a hard-coded list of supported devices, and the Librem Key is not listed in it.

As such, tools that depend of libccid, like opensc-pkcs11 (https://packages.debian.org/buster/opensc-pkcs11) for PKCS#11 do not recognize the Librem Key.


Workaround:

The current workaround is to manually edit the libccid list of supported devices and add the Librem Key: Friendly Name, Vendor ID and Device ID.

after libccid is installed, the file with the list of supported devices can be found at: /etc/libccid_Info.plist

And adding the following strings:

in <key>ifdVendorID</key>

add: <string>0x316D</string>

in: <key>ifdProductID</key>

add: <string>0x4C4B</string>

in: <key>ifdFriendlyName</key>

add: <string>Librem Key</string>

After rebooting the machine, libccid will recognize the Librem Key


Long term solution:

We need to submit an upstream patch to libccid at: https://salsa.debian.org/rousseau/CCID

The workflow to request to the developers adding support for a new device is explained here: https://ccid.apdu.fr/#CCID_compliant

Event Timeline

jeremiah.foster triaged this task as Normal priority.
joao.azevedo updated the task description. (Show Details)Dec 13 2019, 03:25

The developer of libccid has been contacted.

Sent him the output files he asks in his website via email along with information regarding the Librem Key. And asking what more information is required on our side.

Waiting on his reply

Seems the emails sent to the developers bounced back. Checking it with our sysadmins and looking for alternative ways to contact them