Bug 8438 - Signing doesn't work on recent OpenSC versions with redirected smart card
Summary: Signing doesn't work on recent OpenSC versions with redirected smart card
Status: CLOSED INVALID
Alias: None
Product: ThinLinc
Classification: Unclassified
Component: Client platforms (show other bugs)
Version: trunk
Hardware: PC Unknown
: P2 Normal
Target Milestone: 4.18.0
Assignee: Bugzilla mail exporter
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-10-31 11:11 CET by Emelie
Modified: 2024-11-05 13:21 CET (History)
1 user (show)

See Also:
Acceptance Criteria:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Emelie cendio 2024-10-31 11:11:51 CET 
The redirection in ThinLinc seems to work, we can list the certificates, but signing a file fails. This seems to be a bug in the OpenSC version that Ubuntu 24.10 has (0.25.1).

The error we got was:
> pkcs15-crypt --key 46 --sign --pkcs1 --sha-1 --input data.sha1 --output data.sig
> 
> Compute signature failed: Internal error

In the OpenSC project, it looks like this will be fixed in the next version (0.26.0): https://github.com/OpenSC/OpenSC/issues/3072.

This was found when testing bug 8435.
Comment 1 Samuel Mannehed cendio 2024-11-01 15:19:09 CET 
The same problem can be reproduced on Fedora 41, which has the same OpenSC version.
Comment 2 Samuel Mannehed cendio 2024-11-05 13:21:19 CET 
This is a general issue in OpenSC and not specific to ThinLinc. As such, there isn't anything we can do here. Users will need to either downgrade, or wait for a fixed version.
Note You need to log in before you can comment on or make changes to this bug.