search

mhogomchungu / zuluCrypt

zuluCrypt is a front end to cryptsetup and tcplay and it allows easy management of encrypted block devices
https://mhogomchungu.github.io/zuluCrypt
Other
496 stars 61 forks source link

"Failed to Locate or Run yubikey's "ykchalresp" when trying to add yubikey to keyslot on ubuntu 20.04 #174

Closed GIJack closed 2 years ago

GIJack commented 2 years ago

What: I am trying to add a yubikey + password to a keyslot on a freshly created luks partition in a hard disk

I am getting error "Failed To Locate Or Run Yubikey's "ykchalresp" Program", as an error.

I have confirmed that the yubikey software is installed from ubuntu, and this program exists

$ which ykchalresp
/usr/bin/ykchalresp
$ ykchalresp -V
1.20.0

Software: Ubuntu 20.04 Desktop zuluCrypt 6.0.0 compiled binaries from the download page for said distro. zulucrypt_error

If the file does get added, I get the same issue when trying to open a encrypted volume on a hard disk

GIJack commented 2 years ago

Additional testing. From running STDOUT/STDERR


$ zuluCrypt-gui 
Gtk-Message: 10:08:09.981: Failed to load module "canberra-gtk-module"
Failed to get a responce from ykchalresp
StdOUt:
StdError:Yubikey core error: timeout
mhogomchungu commented 2 years ago

The std error message says what the problem is.

Run "ykchalresp" from the terminal and make sure it works properly first.

GIJack commented 2 years ago

confirmed, the program does in fact work:

$ ykchalresp "test" 09b5c7f421ff6fbb227a040443afd45d0e0df26f

On further testing, it seems to be able to add a key if I hold down the button to the yubikey before confirming, but they will not be able to unlock the volume

might be an issue with timeouts.

mhogomchungu commented 2 years ago

The yubikey i have requires i press it for it to send its passphrase.

I am closing this one as a "local issue" since things work as expected if you use your yubikey the expected way.