Nitrokey Start and Openwrt GL-AR300M - no access

Hi folks,

want to use the Nitrokey Start on an cheap openwrt router/ap (OpenWrt 18.06.1)

after inserting the token - looks good to me:

lsusb -t
/:  Bus 01.Port 1: Dev 1, Class=root_hub, Driver=ehci-platform/1p, 480M
    |__ Port 1: Dev 6, If 0, Class=Chip/SmartCard, Driver=, 12M


Kernel Log:
[91720.742369] usb 1-1: new full-speed USB device number 6 using ehci-platform
[91720.942927] usb 1-1: New USB device found, idVendor=20a0, idProduct=4211
[91720.949967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[91720.957392] usb 1-1: Product: Nitrokey Start
[91720.961951] usb 1-1: Manufacturer: Nitrokey
[91720.966316] usb 1-1: SerialNumber: FSIJ-1.2.10-43114251

but I can not access the “reader”

OpenSC Explorer version 0.17.0
No smart card readers found.

pcsc_scan
Using reader plug'n play mechanism
Scanning present readers...
Waiting for the first reader...

unfortunately this plattform supports gpg (GnuPG) 1.4.21 only.

any ideas ? recommendations?

regards,

Bernd

Hi @beko!

This is quite interesting idea. Indeed according to OpenWrt 18.06 package list there is no GnuPG 2 available. You would probably have to crossbuild it locally and upload. Aside from GnuPG2, you would need the scdaemon package.

Since you have OpenSC installed, it might not be required though. It depends however whether this version supports the Nitrokey Start (should be). You need to have running pcscd deamon with proper access rights (by either being root or configure them in some other way). OpenSC tools are connecting to the pcscd, and through it accessing the smart card.
Cross-building the latest OpenSC v0.20 might be easier than GnuPG, since the packages are available for not so older version.

Please try to run pcscd and redo pcsc_scan call, or any other OpenSC command, e.g. pkcs11-tool -I.

Hi @szszszsz,

thanks for your feedback. I restarted pcscd

pcscd --foreground --debug --apdu --color

and now I have access

pcsc_scan

Reader 0: Nitrokey Nitrokey Start (FSIJ-1.2.10-43114251) 00 00
Card state: Card inserted,
ATR: 3B DA 11 FF 81 B1 FE 55 1F 03 00 31 84 73 80 01 80 05 90 00 E1

so we will see …

regards,

Bernd

2 Likes