Secretive repeatedly asks for pin for Yubikey but does not proceed

[onnimonni]

Hey,

I tested few hardware keys with secretive. My smart card through card reader works perfectly but my legacy yubikey neo nfc in PIV mode does not.

Secretive finds my yubikey properly:

I can log in to github with my yubikey when I give the right pin:

$ ssh -o IdentityAgent=none -I /path/to/my/lib/opensc-pkcs11.so [email protected]
Enter PIN for '[email protected]':
PTY allocation request failed on channel 0
Hi onnimonni! You've successfully authenticated, but GitHub does not provide shell access.
Connection to github.com closed.

But when I try to use the same yubikey through Secretive it looks like this:

Screen.Recording.2025-02-05.at.23.08.45.mov

So it checks the pin code properly but just asks it again and again when I give correct pin code.

My setup for yubikey:

$ ykman list
YubiKey NEO (3.4.9) [CCID] Serial: XXXXXXXX

How I generated the key to the piv:

$ ykman --version
YubiKey Manager (ykman) version: 5.5.1
$ ykman piv reset
$ ykman piv access change-management-key
$ ykman piv access change-pin
$ ykman piv access change-puk
$ ykman piv keys generate -a ECCP256 9a ./yubikey-public.pem
$ ykman piv certificates generate --subject '[email protected]' -d 1825 9a ./yubikey-public.pem

Because using opensc-pkcs11.so directly still works well I assume the fault is in secretive or the pin entry used by secretive.