Cannot authenticate SSH after any GPG operations

Question

Cannot authenticate SSH after any GPG operations

hfziu opened this issue 3 years ago · 2 comments

Hi,

I'm using a YubiKey 5 NFC with WinCryptSSHAgent. I've generated a certificate in PIV certificate Slot 9a:

and it works well with WinSSH. However, after each time I perform any GPG operation (e.g., gpg --card-status, gpg --sign, etc.), I can no longer use my YubiKey with WinCryptSSHAgent to authenticate SSH connections:
"The smart card cannot perform the requested operation or the operation requires a different smart card."

Seems like that once I've performed any GPG operation, Windows will no longer read the PIV certificates stored in YubiKey until replugging.

Any idea or solution on this issue? Thanks a lot!

Answer 1 · 2021-08-30T06:35:35.000Z

Append: seems like the same issue with #1 and #10

OpenPGP conflicts with WinCryptSSHAgent

Answer 2 · 2021-09-17T07:40:21.000Z

AFAIK this is common gpg issue, it exclusively locks tokens. It was reproduced in my environment on ubuntu 18 host.