Re: [Question] Importing X509 key and certificate

2016-09-02T03:53:12+01:00

To import a key (and a cert) you need the management key (specified by "-k"), not the PIN. So naturally, authentication fails.

Statistics: Posted by mouse008 — Fri Sep 02, 2016 3:53 am

[Question] Importing X509 key and certificate

2016-09-01T19:15:03+01:00

Hi folks!

I'm trying to import an X509 (RSA) key and its corresponding certificate to a Yubikey NEO. Given that the files were created with

Code:

openssl req -x509 -new -newkey rsa:2048 -days 1825 -nodes -subj '/CN=username' -keyout x509.key -out x509.crt

I'm trying to import the data with

Code:

yubico-piv-tool -s 9a -i x509.key -a import-key
yubico-piv-tool -s 9a -i x509.crt -a import-certificate

getting the following error for both of the commands:

Code:

Failed authentication with the application.

Same thing happens when I specify the (correct) PIN with -P.

Any suggestions?

Greetings,
/dev

Statistics: Posted by Deever — Thu Sep 01, 2016 7:15 pm