AqBanking

Da der Zugriff auf das comdirect-Konto (vermutlich wegen der PSD2-Umstellung) nicht mehr funktioniert hat, habe ich es mit Neuanlegen versucht - zuerst über KMyMoney (5.0.6) und danach über das CLI. Bei beiden scheitert es an der gleichen Stelle:

$ aqbanking-cli versions
Versions:
AqBanking-CLI: 5.8.2
Gwenhywfar   : 4.20.2.0
AqBanking    : 5.8.2.0

$ aqhbci-tool4 adduser -N "REDACTED" -t pintan -b 20041111 -u XXXXXXXX -s "https://fints.comdirect.de/fints" --hbciversion=300

$ aqhbci-tool4 getsysid -u XXXXXXXX
===== Getting Certificate =====
Preparing connection
Connecting to server...
Resolving hostname "fints.comdirect.de" ...
IP address is "193.41.133.14" 
Connecting to "fints.comdirect.de" 
Connected to "fints.comdirect.de" 
Using GnuTLS default ciphers.
TLS: SSL-Ciphers negotiated: TLS1.2:ECDHE-RSA-AES-256-GCM:AEAD
5:2019/10/03 21-00-52:aqbanking(431651):abgui.c:  163: Automatically accepting certificate [E4:94:A7:E6:EE:00:2B:B7:4E:C6:BC:8F:70:C2:D3:BF]
Connected.
Disconnected.
Got certificate
Getting Certificate: Finished.
Locking users
Locking user XXXXXXXX
Executing HBCI jobs
AqHBCI started
There are no tan method descriptions (yet), trying One-Step TAN.
Encoding queue
4:2019/10/03 21-00-52:aqbanking(431651):de.c:  116: Bank data for KtoBlzCheck not found (-51), falling back to default
===== Enter PIN =====
Please enter the PIN for 
user XXXXXXXX at comdirect bank

Input: ******
Sending queue
Connecting to server...
Resolving hostname "fints.comdirect.de" ...
IP address is "193.41.133.14" 
Connecting to "fints.comdirect.de" 
Connected to "fints.comdirect.de" 
Using GnuTLS default ciphers.
TLS: SSL-Ciphers negotiated: TLS1.2:ECDHE-RSA-AES-256-GCM:AEAD
5:2019/10/03 21-00-58:aqbanking(431651):abgui.c:  163: Automatically accepting certificate [E4:94:A7:E6:EE:00:2B:B7:4E:C6:BC:8F:70:C2:D3:BF]
Connected.
Sending message...
Message sent.
Waiting for response
Receiving response...
HTTP-Status: 200 (200)
Response received.
Disconnecting from server...
Disconnected.
Response received
HBCI: 3060 - Bitte beachten Sie die enthaltenen Warnungen/Hinweise. (M)
HBCI: 0020 - Auftrag ausgefuehrt. (S)
HBCI: 3050 - BPD nicht mehr aktuell, aktuelle Version enthalten. (S)
HBCI: 0020 - Dialog initialisiert. (S)
HBCI: 3920 - Verfügbare TAN-Verfahren: photoTAN und mobileTAN. (S)
Dialog not aborted, assuming PIN is ok
Encoding queue
Sending queue
Connecting to server...
Resolving hostname "fints.comdirect.de" ...
IP address is "193.41.133.14" 
Connecting to "fints.comdirect.de" 
Connected to "fints.comdirect.de" 
Using GnuTLS default ciphers.
TLS: SSL-Ciphers negotiated: TLS1.2:ECDHE-RSA-AES-256-GCM:AEAD
5:2019/10/03 21-00-58:aqbanking(431651):abgui.c:  163: Automatically accepting certificate [E4:94:A7:E6:EE:00:2B:B7:4E:C6:BC:8F:70:C2:D3:BF]
Connected.
Sending message...
Message sent.
Waiting for response
Receiving response...
HTTP-Status: 200 (200)
Response received.
Disconnecting from server...
Disconnected.
Response received
HBCI: 0010 - Nachricht entgegengenommen. (M)
HBCI: 0100 - Dialog beendet. (M)
Dialog not aborted, assuming PIN is ok
AqHBCI finished.

$ aqhbci-tool4 getaccounts -u XXXXXXXX
Locking users
Locking user XXXXXXXX
Executing HBCI jobs
AqHBCI started
There are no tan method descriptions (yet), trying One-Step TAN.
Encoding queue
4:2019/10/03 21-01-09:aqbanking(431798):de.c:  116: Bank data for KtoBlzCheck not found (-51), falling back to default
===== Enter PIN =====
Please enter the PIN for 
user XXXXXXXX at comdirect bank

Input: ******
Sending queue
Connecting to server...
Resolving hostname "fints.comdirect.de" ...
IP address is "193.41.133.14" 
Connecting to "fints.comdirect.de" 
Connected to "fints.comdirect.de" 
Using GnuTLS default ciphers.
TLS: SSL-Ciphers negotiated: TLS1.2:ECDHE-RSA-AES-256-GCM:AEAD
5:2019/10/03 21-01-15:aqbanking(431798):abgui.c:  163: Automatically accepting certificate [E4:94:A7:E6:EE:00:2B:B7:4E:C6:BC:8F:70:C2:D3:BF]
Connected.
Sending message...
Message sent.
Waiting for response
Receiving response...
HTTP-Status: 200 (200)
Response received.
Disconnecting from server...
Disconnected.
Response received
HBCI: 9050 - Die Nachricht enthaelt Fehler. (M)
HBCI: 9800 - Dialog abgebrochen (M)
HBCI: 9955 - Unzulässiges TAN-Verfahren. (S)
HBCI: 3920 - Verfügbare TAN-Verfahren: photoTAN und mobileTAN. (S)
Dialog aborted by bank, assuming bad PIN
Dialog aborted by server
AqHBCI finished.
3:2019/10/03 21-01-15:aqhbci(431798):provider.c: 1324: Job has errors
3:2019/10/03 21-01-15:(null)(431798):getaccounts.c:  159: Error getting accounts (-1)

$ aqhbci-tool4 listitanmodes -u XXXXXXXX
TAN Methods

$