search

polhenarejos / pico-openpgp

OpenPGP CCID smart card for Raspberry Pico and ESP32
https://www.picokeys.com
GNU General Public License v3.0
78 stars 10 forks source link

ykman compatible? #18

Open hkfuertes opened 3 months ago

hkfuertes commented 3 months ago

Hello, Just tested and patched my pico with this firmware and yubiko 4/5 vid/pid. I see this:

hkfuertes@trantor:~$ ykman list
WARNING: Failed opening device
YubiKey [OTP+FIDO+CCID] <access denied>

I have tested with an original Yubikey 5 Fido and ykman is properly configured (udev). Does this means that this firmware is not compatible with Yubico Software? if so, is there any GUI software to add my certificates (piv)? I saw the opensc, and I believe it worked for me, but I would love to use a GUI software (windows/linux)

Thank you!

polhenarejos commented 3 months ago

At this moment, only yubico-piv-tool is supported for PIV in Pico OpenPGP. gpg/gpg2 is supported for the OpenPGP features and ykman is supported in Pico Fido for FIDO, OTP and OATH.

Unfortunately, yubico-piv-tool is only CLI: https://developers.yubico.com/yubico-piv-tool/

In the future, I'll bring support to ykman in Pico OpenPGP.

polhenarejos commented 3 months ago

I added support to ykman but the OpenPGP app is broken, since Yubico does not follow the standard. PIV works smoothly. In case you'd need to use OpenPGP, gpg2 is the recommended app.

Changes are available in the repo and will be released soon.