with wayprompt: Failed to load app: Failed to get USS: pinentry GetPin: pinentry: unexpected response: "END"

[bbigras]

with https://git.sr.ht/~leon_plickat/wayprompt

jui 14 22:24:12 desktop tkey-ssh-agent[118913]: Listening on /run/user/1000/tkey-ssh-agent
jui 14 22:25:17 desktop tkey-ssh-agent[118913]: Handling a client connection
jui 14 22:25:17 desktop tkey-ssh-agent[118913]: Auto-detected serial port /dev/ttyACM0
jui 14 22:25:17 desktop tkey-ssh-agent[118913]: Connecting to TKey on serial port /dev/ttyACM0
jui 14 22:25:17 desktop tkey-ssh-agent[118913]: TKey is in firmware mode.
jui 14 22:25:31 desktop tkey-ssh-agent[118913]: Failed to load app: Failed to get USS: pinentry GetPin: pinentry: unexpected response: "END"
jui 14 22:25:31 desktop tkey-ssh-agent[118913]: List: connect failed, returning empty list

It's fine with pinentry-qt.

[mchack-work]

Thanks for the report. I would also very much like to be able to use wayprompt. Even better would be to lose the pinentry altogether and use wayprompt and similar directly. This is what we currently do under macOS.

I can reproduce the error with latest version of wayprompt built from source. I ran:

./tkey-ssh-agent --pinentry /home/mc/.local/bin/pinentry-wayprompt -p --uss 

wayprompt's window shows up and I can type in it. If I don't enter any USS at all, just pressing return immediately, everything seems to work. If I type anything, it breaks down like in the above report.

I also tried using github.com/twpayne/go-pinentry in the agent instead of go-pinentry-minimal like #124 refers to. No luck, I'm afraid.

My guess is that they don't agree in the implementation of the pinentry protocol. Like it says in the pinentry-wayprompt manual:

As of writing, pinentry-wayprompt implements the most important components of the pinentry protocol to be viable for day-to-day usage. However more advanced features are not yet supported.

I definitely think we should look into it, but it's not a priority right now. The next generation, Castor, is priority one.

[mchack-work]

Using just wayprompt as it is, similarly to what the wayprompt-ssh-askpass script does, looks promising.

For X11 we might use the original ssh-askpass.