Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Manager don't show info about the key #625

Open
AndreyMlashkin opened this issue Jul 25, 2024 · 1 comment
Open

Manager don't show info about the key #625

AndreyMlashkin opened this issue Jul 25, 2024 · 1 comment

Comments

@AndreyMlashkin
Copy link

  • YubiKey Manager (ykman) version: 5.5.1
  • How was it installed?: apt-get
  • Operating system and version: ubuntu 24.04
  • YubiKey model and version: YubiKey 5C NFC
  • Bug description summary: yubimanager and yuboauth don't find the key. The same key is visible on ubuntu 22.04

Steps to reproduce

[Please explain what you did when the bug appeared, and if and how you have been
able to reproduce it.]
I haven't tried to reproduce it, as it would mean to re-install OS.

Expected result

I expect yuboauth to show information about my key

Actual results and logs

image
image

Other info

$ ykman --diagnose
ykman:            5.5.1
Python:           3.12.3 (main, Apr 10 2024, 05:33:47) [GCC 13.2.0]
Platform:         linux
Arch:             x86_64
System date:      2024-07-25
Running as admin: False
Detected PC/SC readers:
  Yubico YubiKey OTP+FIDO+CCID 00 00: Success

Detected YubiKeys over PC/SC:
  ScardYubiKeyDevice(pid=0407, fingerprint='Yubico YubiKey OTP+FIDO+CCID 00 00'):
    Management:
      Raw Info: 3b0102033f0302033f020401ca96f104010305030507010602000007010f0801000d02033f0e02033f0a01000f01002003000000210300000010010125110400000000120100130c3738434c55465835303030501402000015020000160100170100
      DeviceInfo:
        config:        
          enabled_capabilities:      
            USB: OTP|U2F|FIDO2|OATH|PIV|OPENPGP|HSMAUTH: 0x33f
            NFC: OTP|U2F|FIDO2|OATH|PIV|OPENPGP|HSMAUTH: 0x33f

          auto_eject_timeout:         0
          challenge_response_timeout: 15
          device_flags:               0
          nfc_restricted:             False

        serial:         30054129
        version:        5.7.1
        form_factor:    Keychain (USB-C)
        supported_capabilities:
          USB: OTP|U2F|FIDO2|OATH|PIV|OPENPGP|HSMAUTH: 0x33f
          NFC: OTP|U2F|FIDO2|OATH|PIV|OPENPGP|HSMAUTH: 0x33f

        is_locked:      False
        is_fips:        False
        is_sky:         False
        part_number:    78CLUFX5000P
        fips_capable:   : 0x0
        fips_approved:  : 0x0
        pin_complexity: False
        reset_blocked:  : 0x0
        fps_version:    None
        stm_version:    None

      Name: YubiKey 5C NFC

    PIV:
      PIV version:              5.7.1
      PIN tries remaining:      3/3
      PUK tries remaining:      3/3
      Management key algorithm: AES192
      WARNING: Using default PIN!
      WARNING: Using default PUK!
      WARNING: Using default Management key!
      CHUID: No data available
      CCC:   No data available

    OATH:
      Oath version:       5.7.1
      Password protected: False

    OpenPGP:
      OpenPGP version:            3.4
      Application version:        5.7.1
      PIN tries remaining:        1
      Reset code tries remaining: 0
      Admin PIN tries remaining:  3
      Require PIN for signature:  Once
      KDF enabled:                False
      Touch policies:            
        Signature key:      Off
        Encryption key:     Off
        Authentication key: Off
        Attestation key:    Off

    YubiHSM Auth:
      YubiHSM Auth version:             5.7.1
      Management key retries remaining: 8/8

Detected YubiKeys over HID OTP:
  OtpYubiKeyDevice(pid=0407, fingerprint='/dev/hidraw4'):
    Management:
      Raw Info: 3b0102033f0302033f020401ca96f104010305030507010602000007010f0801000d02033f0e02033f0a01000f01002003000000210300000010010125110400000000120100130c3738434c55465835303030501402000015020000160100170100
      DeviceInfo:
        config:        
          enabled_capabilities:      
            USB: OTP|U2F|FIDO2|OATH|PIV|OPENPGP|HSMAUTH: 0x33f
            NFC: OTP|U2F|FIDO2|OATH|PIV|OPENPGP|HSMAUTH: 0x33f

          auto_eject_timeout:         0
          challenge_response_timeout: 15
          device_flags:               0
          nfc_restricted:             False

        serial:         30054129
        version:        5.7.1
        form_factor:    Keychain (USB-C)
        supported_capabilities:
          USB: OTP|U2F|FIDO2|OATH|PIV|OPENPGP|HSMAUTH: 0x33f
          NFC: OTP|U2F|FIDO2|OATH|PIV|OPENPGP|HSMAUTH: 0x33f

        is_locked:      False
        is_fips:        False
        is_sky:         False
        part_number:    78CLUFX5000P
        fips_capable:   : 0x0
        fips_approved:  : 0x0
        pin_complexity: False
        reset_blocked:  : 0x0
        fps_version:    None
        stm_version:    None

      Name: YubiKey 5C NFC

    OTP:
      ConfigState(configured: (True, False), touch_triggered: (True, False), led_inverted: False)

Detected YubiKeys over HID FIDO:
  CtapYubiKeyDevice(pid=0407, fingerprint='/dev/hidraw5'):
    CTAP device version:      5.7.1
    CTAPHID protocol version: 2
    Capabilities:             5
    Management:              
      Raw Info: 3b0102033f0302033f020401ca96f104010305030507010602000007010f0801000d02033f0e02033f0a01000f01002003000000210300000010010125110400000000120100130c3738434c55465835303030501402000015020000160100170100
      DeviceInfo:
        config:        
          enabled_capabilities:      
            USB: OTP|U2F|FIDO2|OATH|PIV|OPENPGP|HSMAUTH: 0x33f
            NFC: OTP|U2F|FIDO2|OATH|PIV|OPENPGP|HSMAUTH: 0x33f

          auto_eject_timeout:         0
          challenge_response_timeout: 15
          device_flags:               0
          nfc_restricted:             False

        serial:         30054129
        version:        5.7.1
        form_factor:    Keychain (USB-C)
        supported_capabilities:
          USB: OTP|U2F|FIDO2|OATH|PIV|OPENPGP|HSMAUTH: 0x33f
          NFC: OTP|U2F|FIDO2|OATH|PIV|OPENPGP|HSMAUTH: 0x33f

        is_locked:      False
        is_fips:        False
        is_sky:         False
        part_number:    78CLUFX5000P
        fips_capable:   : 0x0
        fips_approved:  : 0x0
        pin_complexity: False
        reset_blocked:  : 0x0
        fps_version:    None
        stm_version:    None

      Name: YubiKey 5C NFC

    Ctap2Info:
      versions:                        
        U2F_V2
        FIDO_2_0
        FIDO_2_1_PRE
        FIDO_2_1

      extensions:                      
        credProtect
        hmac-secret
        largeBlobKey
        credBlob
        minPinLength

      aaguid:                           a25342c03cdc44148e46f4807fca511c
      options:                         
        rk:                    True
        up:                    True
        plat:                  False
        alwaysUv:              False
        credMgmt:              True
        authnrCfg:             True
        clientPin:             False
        largeBlobs:            True
        pinUvAuthToken:        True
        setMinPINLength:       True
        makeCredUvNotRqd:      True
        credentialMgmtPreview: True

      max_msg_size:                     1280
      pin_uv_protocols:                
        2
        1

      max_creds_in_list:                8
      max_cred_id_length:               128
      transports:                      
        nfc
        usb

      algorithms:                      
        alg:  -7
        type: public-key
        alg:  -8
        type: public-key
        alg:  -35
        type: public-key

      max_large_blob:                   4096
      force_pin_change:                 False
      min_pin_length:                   4
      firmware_version:                 329473
      max_cred_blob_length:             32
      max_rpids_for_min_pin:            1
      preferred_platform_uv_attempts:   None
      uv_modality:                      None
      certifications:                   None
      remaining_disc_creds:             100
      vendor_prototype_config_commands: None

    PIN: Not configured

End of diagnostics

@dainnilsson
Copy link
Member

If I understand your issue correctly, ykman is working as expected? The issue is with those other projects?

The screenshot of Yubico Authenticator shows an old version that is not compatible with Python 3.12, which is what is included in Ubuntu 24.04. If you update to the latest version of Yubico Authenticator (7.0) it should work.
YubiKey Manager GUI is also not compatible with Pyhton 3.12, and is no longer under active development. I recommend Yubico Authenticator 7 as a replacement.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

2 participants