Yubico Authenticator hangs each time it is started and has been running for a view minutes

[cnaumer]

• Yubico Authenticator version: 5.0.5
• Operating system and version: Fedora 34 ( also tested on 33)
• YubiKey model and version: YubiKey 5C NFC
• Bug description summary: Yubico Authenticator hangs each time it is started and has been running for a view minutes. If the window is closed the process hangs in the background and has to be killed. All other programs that try to interact with the pcscd service hang until it is restarted. Also if the program is kept open for a view minutes it then hangs.

Steps to reproduce

Start Yubico Authenticator copy a OTP and close the windows. Process hangs in the background and has to be killed. pcscd service needs to be restarted for other programs to work again. Or keep the program running it will hang after a view minutes.

Expected result

If Yubico Authenticator window is closed the program should not run in the background. And should not hang after a view minutes

Actual results

it keeps on running

Other info

If the program hangs this is in the logs until pcscd is restarted: Mai 20 08:07:48 hostname pcscd[1149]: 00009217 commands.c:1580:CCID_Receive Overrun error Mai 20 08:07:48 hostname pcscd[1149]: 00000026 ifdwrapper.c:543:IFDTransmit() Card not transacted: 612 Mai 20 08:07:48 hostname pcscd[1149]: 00000009 winscard.c:1620:SCardTransmit() Card not transacted: 0x80100016

[cnaumer]

There have been some reports that are related: https://bugzilla.redhat.com/show_bug.cgi?id=1843717 https://bugzilla.redhat.com/show_bug.cgi?id=1853347

[fdennis]

Hi, Could you share how you are installing/running Yubico Authenticator?

[fdennis]

From the bugzilla reports you linked to this issue seems to appear when using a Chrome-based browser or Thunderbird or similar. Is this the case in your report as well? Or does that not matter?

[cnaumer]

It happens with a lot of programs as in Fedora the card reader is linked to p11-kit-proxy. Every program using this hangs. But this is just the symptom of Yubico Authenticator hanging which in turn hangs pcscd.

[cnaumer]

Hi, Could you share how you are installing/running Yubico Authenticator? I installed the app from the Fedora repros:

Name : yubioath-desktop Version : 5.0.5 Release : 2.fc34 Architecture : x86_64 Size : 6.1 M Quelle : yubioath-desktop-5.0.5-2.fc34.src.rpm Repository : @System Aus Paketque : updates Summary : Yubikey tool for generating OATH event-based HOTP and time-based TOTP codes URL : https://github.com/Yubico/yubioath-desktop Lizenz : BSD Description : The Yubico Authenticator is a graphical desktop tool and CLI for generating : Open AuTHentication (OATH) event-based HOTP and time-based TOTP one-time : password codes, with the help of a YubiKey that protects the shared secrets.

[cnaumer]

Just tried with the appImage from here (https://developers.yubico.com/yubioath-desktop/Releases/). Same problem.

[cnaumer]

Also just tried to read OTP with ykman. This works but after a 5-10 tries pcscd also hangs with the same error:

Mai 20 12:50:14 hostname pcscd[134522]: 00000000 commands.c:1580:CCID_Receive Overrun error Mai 20 12:50:14 hostname pcscd[134522]: 00000055 ifdwrapper.c:543:IFDTransmit() Card not transacted: 612 Mai 20 12:50:14 hostname pcscd[134522]: 00000011 winscard.c:1620:SCardTransmit() Card not transacted: 0x80100016

I not sure how to further debug this.

[fdennis]

Regarding your last message, does this happen when you only run ykman (without yubioath) or are you running yubioath at the same time as ykman?

[cnaumer]

Regarding your last message, does this happen when you only run ykman (without yubioath) or are you running yubioath at the same time as ykman?

No just using ykman. So it is probably something to do with both programs contact pcscd. There are so many bug reports related to yubikey and pcscd:

https://bugzilla.redhat.com/show_bug.cgi?id=1808258 https://bugzilla.redhat.com/show_bug.cgi?id=1902973

but it is all very confusing as there are a lot of symptoms that point in different directions.

[bashims]

Having the same issue here on my Fedora 34 system. The yubioath-desktop exhibits the following issues:

• Hangs on TERM, have to send KILL or restart pcscd.service
• OTP passwords generated once, then no keys are detected.

Tested with both YubiKey 5 NFC and YubiKey 5C Nano

rpm info.

pcsc-lite-1.9.1-1.fc34.x86_64

Name        : yubioath-desktop
Version     : 5.0.5
Release     : 2.fc34
Architecture: x86_64
Install Date: Fri 21 May 2021 02:23:09 PM EDT
Group       : Unspecified
Size        : 6397982
License     : BSD
Signature   : RSA/SHA256, Tue 20 Apr 2021 04:49:39 PM EDT, Key ID 1161ae6945719a39
Source RPM  : yubioath-desktop-5.0.5-2.fc34.src.rpm
Build Date  : Tue 20 Apr 2021 02:12:07 PM EDT
Build Host  : buildhw-x86-04.iad2.fedoraproject.org
Packager    : Fedora Project
Vendor      : Fedora Project
URL         : https://github.com/Yubico/yubioath-desktop
Bug URL     : https://bugz.fedoraproject.org/yubioath-desktop
Summary     : Yubikey tool for generating OATH event-based HOTP and time-based TOTP codes
Description :
The Yubico Authenticator is a graphical desktop tool and CLI for generating
Open AuTHentication (OATH) event-based HOTP and time-based TOTP one-time
password codes, with the help of a YubiKey that protects the shared secrets.

[AngusMcGyver]

i had the same issue under Ubuntu 20.04. as mentioned before, the problem is the pcscd which crashes.

after days of debugging, reading threads and testing, i finally solved it by replacing the libpam-pkcs11 version 0.6.11 from the Ubuntu repository with a self build of version 0.6.12. source code can be found here https://github.com/OpenSC/pam_pkcs11

[dainnilsson]

Yubico Authenticator 6.0 has now been released and uses a new codebase. As such, this issue has been marked with the legacy label, and will be automatically closed in 7 days. If this issue is still relevant to Yubico Authenticator 6, please comment on the issue saying so, and it will be kept open (or be re-opened). Sorry for the inconvenience!