Improve error message if no reset code (PUK) is set
Open, NormalPublic
Actions

Assigned To

Authored By

	• ebo
	Mar 23 2023, 4:05 PM

Description

If I take a smart card where no PUK (PW2) is set and execute the following, the info returned is correct:

gpg --card-edit 
unblock  
gpg: OpenPGP Karte Nr. D276000124010304000500009D400000 erkannt
gpg: Der Rückstellcode ist nicht vorhanden

But if I click "Unblock Card" in Kleopatra, I get "wrong PIN":

Kleopatra is not at fault, Ingo said:

The part after the colon is the error code GPG_ERR_BAD_PIN supplied by the backend converted to text.
GPG_ERR_BAD_PUK does not exist in gpg-error.

Mentioned In: T6231: Release Libgpg-error 1.47
T6425: improve pinentry behavior and texts in smart card context

Having GPG_ERR_BAD_PUK makes sense. So, I added a tag for gpg-error.

Should we also differentiate between wrong PUK and no PUK set?

FWIW, some cards don't have PUKs but two PINs which are able to unblock reciprocal.

• werner triaged this task as Normal priority.Mar 28 2023, 5:08 PM

I'll add new error codes to gpgrt

• werner moved this task from Backlog to WiP on the gnupg22 board.

Not easy do decide whether something is a PIN or a PUK and we will need to check a lot of places. So, not now.

I think we won't fix that for 2.2