search

conorpp / u2f-zero

U2F USB token optimized for physical security, affordability, and style
Other
2.41k stars 200 forks source link

Firefox Quantum unable to authenticate with U2F-zero #91

Closed oupala closed 5 years ago

oupala commented 5 years ago

This issue is rebirth of issue #78 as I'm having the same problem.

I'm using Ubuntu 18.04, the last stable. I'm also using Firefox 62.0.3. My u2f key, a new one supposedly without the bug that affected previous u2fzero keys.

When I use the yubico test site I can't register, neither can I login. It seems to be no interaction between the u2f key and Firefox.

When I use Chrome 69, I have no problem registering and logging in.

Could you please help me troubleshooting this problem?

oupala commented 5 years ago

I just read issue #78 and I went to the test site mentionned by @conorpp: u2f.bin.coffee.

I saw that I had to enable two properties in Firefox:

To use this to test U2F support in Firefox using its built-in software token, do the following:

  • Open the Firefox advanced preferences in about:config.
  • Search for "webauth"
  • Enable (value=True) these two:
    • security.webauth.u2f
    • security.webauth.u2f_enable_softtoken

With theses properties enabled, everything works fine on u2f.bin.coffee website, and on yubico test site.

Could you please explain us why are these properties disabled by default on Firefox for linux? A friend of mine tested it on windows and there was no need to change properties in Firefox for windows...

YakBizzarro commented 5 years ago

Mozilla implemented U2F API in Firefox, but they never enabled that by default, since it has been obsoleted by WebAuthn, which is supported by default

oupala commented 5 years ago

In fact, in my case, enabling security.webauth.u2f_enable_softtoken wasn't necessary. I only had to enable security.webauth.u2f.

I also had to enable this u2fzero key in udev as mentioned in the Using U2F Token on Linux (udev) wiki page.

So using u2fzero does not work out of the box with linux, but it is quite easy to make it work in 2 steps.

oupala commented 5 years ago

@YakBizzarro Does the WebAuthn include the u2f keys and protocol? Is there a link between WebAuthn and u2f?

YakBizzarro commented 5 years ago

It's well explained here: https://www.imperialviolet.org/2018/03/27/webauthn.html

oupala commented 5 years ago

Thanks @YakBizzarro for the link. It is interesting.