mirror of
https://github.com/linuxboot/heads.git
synced 2024-12-23 23:02:26 +00:00
oem-factory-reset + seal-hotpkey: Give debug output to underatand in what state is the USB Security dongle
Signed-off-by: Thierry Laurion <insurgo@riseup.net>
This commit is contained in:
parent
00ce2f4d1c
commit
fc874728f6
initrd/bin
@ -496,7 +496,9 @@ gpg_key_factory_reset() {
|
|||||||
fi
|
fi
|
||||||
# If Nitrokey Storage is inserted, reset AES keys as well
|
# If Nitrokey Storage is inserted, reset AES keys as well
|
||||||
if lsusb | grep -q "20a0:4109" && [ -x /bin/hotp_verification ]; then
|
if lsusb | grep -q "20a0:4109" && [ -x /bin/hotp_verification ]; then
|
||||||
|
DEBUG "Nitrokey Storage detected, resetting AES keys..."
|
||||||
/bin/hotp_verification regenerate ${ADMIN_PIN_DEF}
|
/bin/hotp_verification regenerate ${ADMIN_PIN_DEF}
|
||||||
|
DEBUG "Restarting scdaemon to remove possible exclusive lock of dongle"
|
||||||
killall -9 scdaemon
|
killall -9 scdaemon
|
||||||
fi
|
fi
|
||||||
# Toggle forced sig (good security practice, forcing PIN request for each signature request)
|
# Toggle forced sig (good security practice, forcing PIN request for each signature request)
|
||||||
|
@ -26,6 +26,8 @@ fatal_error()
|
|||||||
{
|
{
|
||||||
echo -e "\nERROR: ${1}; press Enter to continue."
|
echo -e "\nERROR: ${1}; press Enter to continue."
|
||||||
read
|
read
|
||||||
|
# get lsusb output for debugging
|
||||||
|
DEBUG "lsusb output: $(lsusb)"
|
||||||
die "$1"
|
die "$1"
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user