search

trustcrypto / onlykey-agent

The OnlyKey agent is essentially middleware that lets you use OnlyKey as a hardware SSH/GPG device.
https://docs.crp.to/onlykey-agent.html
GNU Lesser General Public License v3.0
46 stars 15 forks source link

onlykey-cli and onlykey-agent Interferes with OnlyKey App #3

Open schlomie opened 6 years ago

schlomie commented 6 years ago

OnlyKey Firmware Beta 6 onlykey-agent (pip install - 0.0.3)

OnlyKey Firmware v0.2-beta.8c App v5.2.0 onlykey-cli v1.1.0 onlykey-agent v1.0.0

When first connected and unlocked, U2F works fine - both from browser and from PAM. After doing any onlykey-agent operation, generate public key, connect to host, etc... U2F stops working. It appears the U2F communication channel is closed and only a disconnect/reconnect/unlock operation re-establishes the connection. U2F from the browser does not work, PAM does not detect a U2F device, nor does the OnlyKey App work.

Still seeing behavior that when the OnlyKey is unlocked, using onlykey-cli or onlykey-agent causes the OnlyKey App to fall back to the Please connect your OnlyKey screen. U2F operation does work. Some fix in beta7 or beta8 has corrected U2F from working.

Not sure if this would be an issue with the firmware or with onlykey python codebase.

nkichukov commented 3 years ago

Perhaps related to: https://github.com/trustcrypto/python-onlykey/issues/44