-
Notifications
You must be signed in to change notification settings - Fork 122
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Yubikey-Manager sends non-standard-conforming APDU for selecting data #403
Comments
Thanks for reporting! We've confirmed that the YubiKey here does not follow the specification correctly here. This will need to be changed in the YubiKey firmware before we can make any changes to this project. I've reported the issue to our firmware team. |
dainnilsson
added a commit
that referenced
this issue
Apr 8, 2021
ya-isakov
added a commit
to ya-isakov/OpenSC
that referenced
this issue
Dec 25, 2023
There is a known issue with Yubikey tokens, that they're requiring another length byte in APDU for SELECT DATA: Yubico/yubikey-manager#403 Let's workaround this, by checking return value of SELECT DATA, and if error indicates that parameters are wrong, let's try Yubikey-specific ones.
5 tasks
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
I tried to find, why MR OpenSC/OpenSC#2103 is not working with Yubikey, not showing any certificates, while I can extract certificate through ykman. I found that Yubikey-Manager uses uses APDU, which is not conforming to https://gnupg.org/ftp/specs/OpenPGP-smart-card-application-3.4.pdf, 7.2.5 - it adds additional length field.
From the standard:
But ykman sends
It seems that sending standard-conforming APDU doesn't work.
The text was updated successfully, but these errors were encountered: