[Freeipa-users] Re: yubikey csr not working

2018-12-04 Thread Natxo Asenjo via FreeIPA-users
hi Fraser, On Mon, Dec 3, 2018 at 1:14 AM Fraser Tweedale wrote: > Hi Naxto, > > The CSR's signature is indeed invalid. Were you able to solve the > issue in the meantime? > yes, I generated a csr locally and saved it in the yubikey. If you do that, everything works great. I'll have a look

[Freeipa-users] Re: yubikey csr not working

2018-12-02 Thread Fraser Tweedale via FreeIPA-users
On Fri, Nov 09, 2018 at 07:42:36AM +0100, Natxo Asenjo via FreeIPA-users wrote: > On Thu, Nov 8, 2018 at 11:32 PM Fraser Tweedale wrote: > > > > > Naxto, could you please provide Dogtag debug log from > > /var/log/pki/pki-tomcat/ca/debug and, if there is any traceback in > > the journal at the

[Freeipa-users] Re: yubikey csr not working

2018-11-08 Thread Natxo Asenjo via FreeIPA-users
On Thu, Nov 8, 2018 at 11:32 PM Fraser Tweedale wrote: > > Naxto, could you please provide Dogtag debug log from > /var/log/pki/pki-tomcat/ca/debug and, if there is any traceback in > the journal at the time of this error, please give detail of that > too (`journalctl -u

[Freeipa-users] Re: yubikey csr not working

2018-11-08 Thread Fraser Tweedale via FreeIPA-users
On Thu, Nov 08, 2018 at 05:16:53PM -0500, Rob Crittenden via FreeIPA-users wrote: > Natxo Asenjo via FreeIPA-users wrote: > > hi, > > > > I am testing smartcard authentication with a yubikey neo like described > > in > >

[Freeipa-users] Re: yubikey csr not working

2018-11-08 Thread Rob Crittenden via FreeIPA-users
Natxo Asenjo via FreeIPA-users wrote: > hi, > > I am testing smartcard authentication with a yubikey neo like described > in > https://frasertweedale.github.io/blog-redhat/posts/2016-08-12-yubikey-sc-login.html > > I successfully generated a key using the yubico-piv-tool, and with that > a csr.