Repository navigation
Unable to register with any U2F device. #96
Description
I've been tring to make the U2F-zero interact with U2F-host(https://github.com/Yubico/python-u2flib-host),but it doesn't work any more. The result is as following:
~$ u2f-register -i reg.json http://localhost:8081
Touch the U2F device you wish to register...
Unable to register with any U2F device.
Is it because the slots is full?? or else? It troubles me a lot.I would be very thankful if someone could help me out.
Activity
conorpp commentedon Jan 3, 2019
what operating system and browser are you using? u2f zero supports unlimited registrations.
huskyachao commentedon Jan 3, 2019
Ubuntu 18.04.1 LTS
No browser, just the command line.
conorpp commentedon Jan 3, 2019
did you set a udev rule?
https://github.com/conorpp/u2f-zero/wiki/Using-U2F-Token-on-Linux-(udev)
huskyachao commentedon Jan 3, 2019
Oh god, I haven't do that.Thanks~
huskyachao commentedon Jan 3, 2019
Oh....I meet with another problem.There is no 70-u2f.rule in my /etc/udev/rules.d, but a 70-snap.core.rules.
Did I miss someting?
conorpp commentedon Jan 3, 2019
You have to create the file
huskyachao commentedon Jan 3, 2019
OK~
huskyachao commentedon Jan 3, 2019
It doesn't work. What would happen if all the 15 slots is full?
conorpp commentedon Jan 3, 2019
can you try running it as root? there should be no 15 slot limit unless your device is 2 years old
huskyachao commentedon Jan 3, 2019
It still doesn't work... Besides, when I do the HID-test, it meet with a problem as follows:
PASS(test_Idle())
PASS(test_Init())
PASS(test_BasicInit())
PASS(test_Unknown(U2FHID_SYNC))
PASS(test_InitOnNonBroadcastEchoesCID())
PASS(test_InitUnderLock())
PASS(test_InitSelfAborts())
PASS(test_InitOther())
PASS(test_OptionalWink())
PASS(test_Lock())
PASS(test_Echo())
CHECK_LE fail at test_LongEcho[148]:sent > .075: 已放弃
conorpp commentedon Jan 3, 2019
yes it's a little slow, that particular test shouldn't be an issue. What about the U2F test?
huskyachao commentedon Jan 3, 2019
Oh,I haven't try it yet. I will try it after lunch. :)
huskyachao commentedon Jan 3, 2019
Here is the result of U2FTest, it seems that there is some problems with enroll:
$ sudo ./U2FTest /dev/hidraw6
PASS(check_Compilation())
PASS(test_Version())
PASS(test_UnknownINS())
PASS(test_WrongLength_U2F_VERSION())
PASS(test_WrongLength_U2F_REGISTER())
PASS(test_BadCLA())
PASS(test_Enroll(0x6985))
Touch device and hit enter..
CHECK_EQ fail at test_Enroll[134]:expectedSW12 != U2Fob_apdu(device, 0, U2F_INS_REGISTER, U2F_AUTH_ENFORCE, 0, string(reinterpret_cast<char*>(®Req), sizeof(regReq)), &rsp): 已放弃
conorpp commentedon Jan 4, 2019
Where/when did you get your token?
huskyachao commentedon Jan 4, 2019
about 2016.11 I guess. It was given by my friend.
huskyachao commentedon Jan 4, 2019
Actually, It worked well when last summer(about 2018.5). My friend changed something about it ,but he forgot which part had been changed. I don't think it's a fatal error.
huskyachao commentedon Jan 4, 2019
when I try to test it in the , https://demo.yubico.com/u2f?tab=register，it returns that
Registration failed!
Make sure you have a U2F device connected, and try again.
Traceback (most recent call last):
File "/root/python-u2flib-server-demo/examples/yubiauth_server.py", line 161, in call
raise Exception("FIDO Client error: %s" % error)
Exception: FIDO Client error: 1 (OTHER ERROR)
And during the time, the LED on the board turn red from green , what does the red light mean?
conorpp commentedon Jan 6, 2019
There was an issue with a particular U2F "CHECK-ONLY" command, which is used to see if a key handle is owned by a U2F token. Needed to be used when there are multiple U2F tokens, some services always use it first. This has since been fixed but it's likely your token has this problem :(
You can exchange it with the channel you or your friend got it from.
huskyachao commentedon Jan 6, 2019
You mean the old version of firmware has this problem and it has been fixed in the latest firmware now?
conorpp commentedon Jan 6, 2019
yes
huskyachao commentedon Jan 8, 2019
Can I update the firmware into the u2f-zero by myself?
I don't have a programmer so I have to use the bootloader method.when I use the command "python client.py bootloader" ,it turns out that
~/u2f-zero/tools/u2f_zero_client$ python client.py bootloader
opened None
If this device has an enabled bootloader, the LED should be turned off.
But I found that the LED is still on(green). Am I do the right steps if I want to change the u2f-zero into bootloader mod ? @conorpp