conorpp / u2f-zero

U2F USB token optimized for physical security, affordability, and style
Other
2.41k stars 202 forks source link

Doesn't register on Windows through FIDOboosterUno #40

Closed scateu closed 6 years ago

scateu commented 7 years ago

http://www.vancosys.com/fidobooster/

When I try to register it through "FIDOboosterUno for Windows 10 64bit",U2F-Zero does give an indication for me to press the button. But FIDOboosterUno doesn't continue after I pressed it. (The U2F-Zero device still keep the indication lights on)

While it works well for my Yubikey Neo.

Plus, what can I do if I want to debug this issue?

Thanks.

FIDOboosterUno Download links

Windows 10

Windows 7/8

darconeous commented 7 years ago

Have you confirmed that your token works for other sites, like Google? I wonder if the button on yours might be broke.

scateu commented 7 years ago

It works for google, dropbox, fastmail, even for pam.d(linux/macOS), and firefox u2f plugin.

So it can be sure there is some compatibility issue with FIDObooster.

I have written to them, and get a response that they are working on it.

crrodriguez commented 7 years ago

@scateu maybe you are hitting https://github.com/conorpp/u2f-zero/issues/36 ? can you check if the key is full already ?

scateu commented 7 years ago

Actually, I tried after 'python client.py wipe' (and 5 press)...

  1. python client.py wipe
  2. Register a new key via FIDO Booster, it prompts: "please press the button on your key"
  3. U2F Zero: LED, Red
  4. me pressing U2F Zero button, LED turns Blue
  5. me releasing U2F Zero button, LED turns back to Red
  6. FIDO Booster still prompts "please press the button on your key"
  7. ...... after pressing button for 15 times, LED indicates that key is full
conorpp commented 7 years ago

@scateu to wipe you need to press button 5 consecutive times. The client tool will let you know if it worked.

scateu commented 7 years ago

"Actually, I tried after 'python client.py wipe' (and 5 press)..."

and it did wipe.

$ python client.py wipe
opened  None
Press U2F button repeatedly until the LED is no longer red.
Wipe succeeded
conorpp commented 7 years ago

I just checked the debugging output and registration seems fine. It's likely an issue with FIDO Booster not handling something right. For instance, when all 15 slots are use up, the u2f zero replies with a valid error response indicating there is no memory. Yet FIDO booster continues to send repeated registration requests.

The program probably has the typical try/except while loop. It probably runs into an error parsing the u2f zero registration certificate which is different from Yubico's cert, causing it to resend another registration. Yubico is probably what the FIDO Boost authors tested against.

scateu commented 7 years ago

Thanks. I have reported this issue to Vancosys. Hope this information will help them debug FIDO booster.

(CC: Bahram and Geoff from vancosys.com)

-- Wang Kang Blog: http://scateu.me Fingerprint: 011F 0492 97D6 5D75 8AC4 6458 D43F 3CE2 3353 B7BD HAM Callsign: BH1RLW

On Mon, 5 Dec 2016, Conor Patrick wrote:

I just checked the debugging output and registration seems fine. It's likely an issue with FIDO Booster not handling something right. For instance, when all 15 slots are use up, the u2f zero replies with a valid error response indicating there is no memory. Yet FIDO booster continues to send repeated registration requests.

The program probably has the typical try/except while loop. It probably runs into an error parsing the u2f zero registration certificate which is different from Yubico's cert, causing it to resend another registration. Yubico is probably what the FIDO Boost authors tested against.

-- You are receiving this because you were mentioned. Reply to this email directly or view it on GitHub: https://github.com/conorpp/u2f-zero/issues/40#issuecomment-265070322

conorpp commented 7 years ago

Is this still being looked at or can I close?

scateu commented 7 years ago

I am trying to program the latest firmware into U2F Zero. After that, I'll test it again.

conorpp commented 6 years ago

Assuming I can close this, let me know if there are still issues.

GitHubMad commented 6 years ago

On Windows 10, I also didn't succeed using U2F-zero with FIDOboosterUno. I bought my U2F-zero here around Xmas. Tested in february. So maybe issue should be re-open...

conorpp commented 6 years ago

There was a faulty batch shipped around Christmas that was fixed by early January. Email me your order ID and we can go from there