Stack Overflow
Stack Overflow

Questions tagged [yubikey]

92 questions
1
vote
0 answers

YubiKey nginx-ingress-controller 400 SSL certificate error

I have nginx-ingress-controlled configured in my RKE2 cluster. One of the deployed applications use Ingress resource with configured client certificate authentication using the following…
user1563721
  • 1,373
  • 3
  • 28
  • 46
1
vote
0 answers

Where is engine_pkcs11.so?

I'm trying to run openssl in combination with a PKCS#11 hardware security module (currently trying with Yubikey 5). All documentation and tutorials I find tell me that I have to use OpenSC as "engine", and the openssl command always look something…
Georg P.
  • 2,785
  • 2
  • 27
  • 53
1
vote
0 answers

Using Yubikey SDK to Programmatically Eject/Insert a Yubikey (C#)

I'm writing a C# app that will be used to program several hundred Yubikeys (set lock code, remove interfaces, etc.), so I want to make it as efficient as possible. Is there any way using methods in the SDK to programmatically eject/insert the…
SteveK
  • 11
  • 2
1
vote
0 answers

Using Yubikey to sign

I am trying to use my Yubikey to sign git commits. I was able to create a master key with three subkeys (authentication, signing and encryption). After I created the subkeys I moved them to my new yubikey. So on the computer I created the keys…
pepsilon
  • 15
  • 4
1
vote
1 answer

Why can't I connect to github with my ssh key on yubikey

I have an SSH key generated on my desktop as well as one generated on my yubikey. Both are ED25519 keys, with the one on the yubikey being an ED25519-sk for the security key. When I run "ssh -t git@github.com" to attempt to connect to github to test…
Austin
  • 69
  • 2
  • 9
1
vote
1 answer

How can I use `ddev auth ssh` with a YubiKey?

I use a YubiKey for my SSH and because of this my /home//.ssh/ folder has no keys: /home//.ssh/ ├── config ├── id_rsa_yubikey.pub └── known_hosts And because I have no keys in my /home//.ssh/ folder I get the following…
stefanfrede
  • 53
  • 7
1
vote
1 answer

Yubikey PIV "The smartcard cannot perform the requested operation."

I am trying to use a Yubikey to authenticate with Microsoft's AAD CBA however when I connect the Yubikey I get the error: The Smart card cannot perform the requested operation or the operation requires a different smart card To troubleshoot I…
Igal Flegmann
  • 582
  • 1
  • 8
  • 19
1
vote
1 answer

How would you reconstruct a public key from the key s-expression and creation timestamp?

I'm specifically asking in relation to this answer where a user is trying to recreate the public key solely from the information in an openPGP Smartcard (due to losing the public key): https://stackoverflow.com/a/69903994/17503333 The answer states…
kinetic_constellation
  • 11
  • 1
1
vote
1 answer

"Confirm user presence for key" message not displayed when using Yubikey for SSH connection

I have created SSH key on Yubikey 5 Nano using FIDO2: ssh-keygen -t ed25519-sk -f ~/.ssh/id_ed25519-sk The Yubikey has user and admin PIN set. When using the key for establishing a SSH connection however, there is no message about requiring to…
Vlad
  • 156
  • 12
1
vote
1 answer

Is it possible to configure jenkins to use a hardware key for sign in?

I have a usb yubikey which I use for ssh and to log in on some websites. Can I configure my jenkins server to allow for and force sign in using a yubikey too? I feel like that would be much more secure than a password.
Karl Essinger
  • 113
  • 10
1
vote
0 answers

multiple signingkeys for one git profile

I wanna sign my git commits with yubikeys. For backup reasons I have two with a different key on each one. Now I want to sign my commits with the keys on the yubikey. Adding multiple keys to the web gui does not seem to be a problem, but I have…
Lithilion
  • 1,097
  • 2
  • 11
  • 26
1
vote
3 answers

ssh-keygen on yubikey gives FIDO_ERR_PIN_AUTH_BLOCKED

ssh-keygen -vvvv -t ecdsa-sk -O resident Generating public/private ecdsa-sk key pair. You may need to touch your authenticator to authorize key generation. Enter PIN for authenticator: debug3: start_helper: started pid=16581 debug3: ssh_msg_send:…
Guerlando OCs
  • 1,886
  • 9
  • 61
  • 150
1
vote
3 answers

"User is not enrolled in Duo Security" after adding a security key

I succesfully added a YubiKey to Snowflake MFA: Next time I try to login I immediately get following "User is not enrolled in Duo Security. Contact your local system administrator." error: After inputting my username and password, I expect the…
jumxozizi
  • 642
  • 10
  • 21
1
vote
0 answers

How to move my current using ssh key into Yubikey?

I'm using Yubikey 5 NFC and want to move my openssh key into it so that I can authenticate for ssh login via this Yubikey. Maybe you will suggest to generate a new gpg keypair for Yubikey and use the gpg-agent instead of ssh-agent to authenticate.…
luochen1990
  • 3,689
  • 1
  • 22
  • 37
1
vote
0 answers

Migrating U2F to WebAuthn in PHP

Since chrome is not going to support U2F anymore, I've been tasked with migrating our authentication to WebAuthn for Yubikeys. We were using https://github.com/Samyoul/U2F-php-server and I've found https://github.com/lbuchs/WebAuthn to replace it…
Sarah
  • 669
  • 2
  • 8
  • 21
1
2
3 4 5 6 7