On Sun, Nov 03, 2019 at 08:50:05PM -0600, Lucas Raab wrote:
> On Sun, Nov 03, 2019 at 01:09:03PM -0800, Greg Steuck wrote:
> > On Sun, Nov 3, 2019 at 6:10 AM Lucas Raab <[email protected]> wrote:
> > > > Lucas, have you tried using ykman?
> > >
> > > I have, using Python 3. The other dependencies/ports (py-fido2 and
> > > pyscard) that I submitted are now Python 3 only as well due to pcsclite
> > > now being a Python 3-only package.
> > 
> > Unfortunately I'm still unsuccessful despite having built everything
> > from this ports tree (required
> > some hacks, please advise where I'm off):
> > https://github.com/openbsd/ports/compare/master...blackgnezdo:yubikey?expand=1
> > 
> > Given this tree, I ran:
> > % cd ./security/yubico/yubikey-manager
> > % FLAVOR=python3 MAKE_JOBS=4 make install SUDO=doas
> > 
> > I'm still getting this error message:
> > % ykman list --serials
> > Traceback (most recent call last):
> >   File "/usr/local/bin/ykman", line 11, in <module>
> >     load_entry_point('yubikey-manager==3.1.0', 'console_scripts', 'ykman')()
> >   File "/usr/local/lib/python3.7/site-packages/ykman/cli/__main__.py",
> > line 260, in main
> >     cli(obj={})
> >   File "/usr/local/lib/python3.7/site-packages/click/core.py", line
> > 722, in __call__
> >     return self.main(*args, **kwargs)
> >   File "/usr/local/lib/python3.7/site-packages/click/core.py", line 697, in 
> > main
> >     rv = self.invoke(ctx)
> >   File "/usr/local/lib/python3.7/site-packages/click/core.py", line
> > 1066, in invoke
> >     return _process_result(sub_ctx.command.invoke(sub_ctx))
> >   File "/usr/local/lib/python3.7/site-packages/click/core.py", line
> > 895, in invoke
> >     return ctx.invoke(self.callback, **ctx.params)
> >   File "/usr/local/lib/python3.7/site-packages/click/core.py", line
> > 535, in invoke
> >     return callback(*args, **kwargs)
> >   File "/usr/local/lib/python3.7/site-packages/click/decorators.py",
> > line 17, in new_func
> >     return f(get_current_context(), *args, **kwargs)
> >   File "/usr/local/lib/python3.7/site-packages/ykman/cli/__main__.py",
> > line 224, in list_keys
> >     for dev in list_devices():
> >   File "/usr/local/lib/python3.7/site-packages/ykman/descriptor.py",
> > line 163, in list_devices
> >     for d in _list_drivers(transports):
> >   File "/usr/local/lib/python3.7/site-packages/ykman/descriptor.py",
> > line 157, in _list_drivers
> >     for dev in open_fido():
> >   File "/usr/local/lib/python3.7/site-packages/ykman/driver_fido.py",
> > line 97, in open_devices
> >     for dev in CtapHidDevice.list_devices(descriptor_filter):
> >   File "/usr/local/lib/python3.7/site-packages/fido2/hid.py", line
> > 135, in list_devices
> >     for d in hidtransport.hid.Enumerate():
> >   File "/usr/local/lib/python3.7/site-packages/fido2/_pyu2f/__init__.py",
> > line 29, in Enumerate
> >     return InternalPlatformSwitch('Enumerate')
> >   File "/usr/local/lib/python3.7/site-packages/fido2/_pyu2f/__init__.py",
> > line 55, in InternalPlatformSwitch
> >     raise Exception('Unsupported platform: ' + sys.platform)
> > Exception: Unsupported platform: openbsd6
> > %
> > 
> > I'll see if teaching py-fido2 about openbsd will make it fare better.
> > 
> > Thanks
> > Greg
> > -- 
> > nest.cx is Gmail hosted, use PGP: 
> > https://pgp.key-server.io/0x0B1542BD8DF5A1B0
> > Fingerprint: 5E2B 2D0E 1E03 2046 BEC3  4D50 0B15 42BD 8DF5 A1B0
> 
> That's curious...I've not done any modifications to any of the sources
> for pyfido2, pyscard, or yubikey-manager. Tomorrow, I'll try again with
> a clean slate and see if I can reproduce your error. Below is the 
> output of `ykman --device 7371849 info`.
> 
> What model of Yubikey are you using, as a matter of interest?
> 
> Device type: YubiKey 4
> Serial number: 7371849
> Firmware version: 4.3.7
> Enabled USB interfaces: OTP+FIDO+CCID
> 
> Applications
> OTP           Enabled         
> FIDO U2F      Enabled         
> OpenPGP       Enabled         
> PIV           Enabled         
> OATH          Enabled         
> FIDO2         Not available   
> 

Aha! It does seem to be device specific. I realized that I had a blue
U2F token and when that's plugged in, I get the same error as you.

Reply via email to