From owner-freebsd-stable@freebsd.org Tue Sep 4 23:03:45 2018 Return-Path: Delivered-To: freebsd-stable@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 946D4FFE5EF for ; Tue, 4 Sep 2018 23:03:45 +0000 (UTC) (envelope-from robertames@hotmail.com) Received: from NAM03-CO1-obe.outbound.protection.outlook.com (mail-oln040092007017.outbound.protection.outlook.com [40.92.7.17]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (Client CN "mail.protection.outlook.com", Issuer "Microsoft IT TLS CA 4" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id CC610850D6 for ; Tue, 4 Sep 2018 23:03:44 +0000 (UTC) (envelope-from robertames@hotmail.com) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=27z5yUWJXCSyDu7ohf3ZUpbFIOaUeSw/7/YeYGab3fw=; b=ZtPKVxzgq1vRNFneNbg9n+wvDS2fXCFbENuohR8WLVTQ99qJ7RkRrVkEz3h6gpbCbikerIkAQR+YjYWFmzGnAsSYWNIlT0IGzLUY51rVVPvCKx9tKX1mXInZGa9iKwOlgjTDoV0MyaV5uQ8KD0lesgVQgyLAsQ+uvoKqiuwQ0k/b3OYg+/Jca5CgFTs72D+Ji+7YHbIDmqW8LdBlHAqLww264LNp3KZXCDSsNrmlkNXgT5Ix95daHoLDugoD1JhfR9BHpjbUe0P9bZ6WLPp/N2FQ0BY6JHuSrTqzdtGJ4QhdVC+qIVQ0MxDQfsUGd7eI26hSTwI7X5+z6lw3+rVt8w== Received: from DM3NAM03FT032.eop-NAM03.prod.protection.outlook.com (10.152.82.52) by DM3NAM03HT146.eop-NAM03.prod.protection.outlook.com (10.152.83.150) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.20.1122.11; Tue, 4 Sep 2018 23:03:42 +0000 Received: from SN6PR08MB5070.namprd08.prod.outlook.com (10.152.82.60) by DM3NAM03FT032.mail.protection.outlook.com (10.152.82.202) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.20.1122.11 via Frontend Transport; Tue, 4 Sep 2018 23:03:42 +0000 Received: from SN6PR08MB5070.namprd08.prod.outlook.com ([fe80::9de:d079:285c:e85d]) by SN6PR08MB5070.namprd08.prod.outlook.com ([fe80::9de:d079:285c:e85d%2]) with mapi id 15.20.1101.016; Tue, 4 Sep 2018 23:03:42 +0000 From: Robert Ames To: "freebsd-stable@freebsd.org" Subject: Yubico Security Keys Thread-Topic: Yubico Security Keys Thread-Index: AQHURKMNipepzrF9Ck+3hOc4mLpvbQ== Date: Tue, 4 Sep 2018 23:03:42 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-incomingtopheadermarker: OriginalChecksum:B04E31A8B36FB3C8B7799A5B7F67EFD7502262AFE53778E9361777AC58EAAE91; UpperCasedChecksum:423C373EF23F3E79FEFF3BB922F713380DA28D13319057A8535C7A41FBA9AFC4; SizeAsReceived:6845; Count:44 x-ms-exchange-messagesentrepresentingtype: 1 x-tmn: [T+BcZGLOZh+uCI2QzqQWdhTTDssbiESA] x-ms-publictraffictype: Email x-microsoft-exchange-diagnostics: 1; DM3NAM03HT146; 6:holxNnktQzIkZT5nk3BLTkLmXb8nxS2nP+GvsOx+/O4J7TKDa4e1aKqMxcp2yrpDVM1bPdOoY4bzpKLJcAGroGjKE32f4Eu+IB1tjOGUcb2TT0jgXMxN7tdkrzcxmjxmYQu1Y3Tu4Y4Wz7hSDTYQlK0K6mWBK5Ear972Bz17d/i11QHePw6aoGIKk/5uiQNdpDk8CQeAoCxvOBmgdubDtH+PMC/IHpB61k+CuIUS6IiQYcSb3TrdYGR98NOpAclO8HJukJA2TrFYswmL+x7LylVomEjrR44QQcnDont2qLLzqKjotJ0Xv7AnJNoZh4RDezMhzzBwJDAuEa4UEeTYsfDRxK1ye5tBzbNReds5BIUhtAx9R4Yi4125BExfcaXT/bgbxeHRn2VGMVmXR60/BJ2zaLYaTorjb7EFSRmJHBNyoJC7RQiQGDBfdiGr3it2bgPn2XoCSs7HSyx886gKvw==; 5:LlF3u+KhbBjWtvFHCQYXOBFI4JggtRGjwKJ1xPP4b7xI1tEj5K38OLzOdOAUa/oOtikJeYykuy3eVdqFrMHpVpBY93Y55mqck0wau8Dn4FenUOorNXx0y/4uF//EQGcjhitzQlFhJrj4k9VA7/ZZWgU2fzm/s7HQcdsK8NL0dQE=; 7:NhPGAZfAHdpArLg6nTaVw0CGce3bfS7MVbnA5BWiiBJ4m2fa5c6Nal9PxE5OcVeHEoEPkMaUqr3+FBWbnmn3VFS5FWKKOnGHEGNAawwmk9BEQh1aDtGIBeORZnN8+p5MbBlMFEWqvPcHKB6j+Z/daTE2PA7G1ywKfeiwoMV/Lyx2lRr1LqbHc9b7BXTyZdti91EsaRDLrmiyZ6yBXUPZJmvvL2mSv1yGSfp6/9nUb0XKe6HcKPy1IofoUp6MBwFK x-incomingheadercount: 44 x-eopattributedmessage: 0 x-microsoft-antispam: BCL:0; PCL:0; RULEID:(7020095)(201702061078)(5061506573)(5061507331)(1603103135)(2017031320274)(2017031324274)(2017031323274)(2017031322404)(1603101475)(1601125500)(1701031045); SRVR:DM3NAM03HT146; x-ms-traffictypediagnostic: DM3NAM03HT146: x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(4566010)(82015058); SRVR:DM3NAM03HT146; BCL:0; PCL:0; RULEID:; SRVR:DM3NAM03HT146; x-forefront-prvs: 0785459C39 x-forefront-antispam-report: SFV:NSPM; SFS:(7070007)(189003)(199004)(73972006)(20460500001)(7696005)(74316002)(83332001)(82202002)(99286004)(305945005)(87572001)(2351001)(106356001)(25786009)(2501003)(104016004)(5250100002)(105586002)(966005)(3480700004)(6916009)(8936002)(2900100001)(14454004)(68736007)(5660300001)(7116003)(8676002)(81156014)(26005)(33656002)(97736004)(15650500001)(86362001)(9686003)(55016002)(486006)(256004)(56003)(102836004)(14444005)(5640700003)(6436002)(6506007)(6346003)(476003)(6306002)(15852004); DIR:OUT; SFP:1901; SCL:1; SRVR:DM3NAM03HT146; H:SN6PR08MB5070.namprd08.prod.outlook.com; FPR:; SPF:None; PTR:InfoNoRecords; MX:1; A:1; received-spf: None (protection.outlook.com: hotmail.com does not designate permitted sender hosts) authentication-results: spf=none (sender IP is ) smtp.mailfrom=robertames@hotmail.com; x-microsoft-antispam-message-info: NnaCIUy311DaXV1xOhNfc0qSRMwLQEZva3GULABr6nCa4Y/xUM+03Bdz5Grm8eanBIv7UJmj8e6v/fd5XeXvHNiI0JzYFYm2mhk+Ov3tUtIpit0WbvBvhKdELTD3VBX5DiiUwo1eUgonm+coYbTmu6ak0CKMw+Cc9gy6gSVupwlRxWtNUzA2n0jigC2RbUmxd4LeOfbwLtnsROGljlOJQewI85MyHDYJaiX/HWuuUc0= Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: hotmail.com X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: b6587b75-6f1a-4db7-b0b6-5cad10ef59a7 X-MS-Exchange-CrossTenant-Network-Message-Id: e61ee1fb-0a8b-4853-6c1f-08d612baa8dd X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: b6587b75-6f1a-4db7-b0b6-5cad10ef59a7 X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Sep 2018 23:03:42.5023 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Internet X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM3NAM03HT146 X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 04 Sep 2018 23:03:45 -0000 I just upgraded to 11.2-RELEASE with Firefox 60.0.1_1,1 from packages. It's my understanding Yubico Security Keys should be supported (I have one of the blue ones).=A0 In Firefox I did about:config and set security.webauth.u2f to true.=A0 When I go to https://demo.yubico.com/u2f to test it, the "Register a U2F device" fails with: Registration failed! Make sure you have a U2F device connected, and try again. =A0Traceback (most recent call last): =A0 File "/root/python-u2flib-server-demo/examples/yubiauth_server.py", lin= e 161, in __call__ =A0=A0=A0 raise Exception("FIDO Client error: %s" % error) Exception: FIDO Client error: 4 (DEVICE INELIGIBLE) FreeBSD sees the device: Sep=A0 4 17:25:13 freebsd kernel: ugen1.4: = at usbus1 Sep=A0 4 17:25:13 freebsd kernel: uhid0 on uhub4 Sep=A0 4 17:25:13 freebsd kernel: uhid0: on usbus1 So should this just work out of the box or is there something I'm missing?