Yubico Forum

Re: yubitouch.sh not working on OS X El Capitan

2016-02-18T11:06:45+01:00

Great.

For the records in case somebody will stumble upon this in the future, it's a good idea to do what you did (having a complex Admin PIN). Just use the script before doing any personalization.

And hopefully we'll come up with a proper tool sooner rather than later (although, in my opinion, the above advice stands. No matter which tool you're using).

Statistics: Posted by Alessio — Thu Feb 18, 2016 11:06 am

Re: yubitouch.sh not working on OS X El Capitan

2016-02-18T10:55:44+01:00

Alessio wrote:

Any chance that you have special characters in your Admin PIN? Something like non-alphanumeric ones.

Alternatively, try to change the Admin PIN back to the default (12345678) or something similar (at least 8 characters) and run the script again.

Yes, that was it, thank you - my Admin "PIN" is actually a passphrase with non-alphanumeric characters. I temporarily changed it to a numeric string and now I have the feature working.

Many thanks,
Chris

Statistics: Posted by chrisamin — Thu Feb 18, 2016 10:55 am

Re: yubitouch.sh not working on OS X El Capitan

2016-02-18T10:16:47+01:00

The script was meant to be a temporary solution, pending a proper one. It should support all kind of PINs, but it's really intended to be run with simple ones. Preferably you want to use it with the default Admin PIN, before you personalize anything in order to prevent any security issue.

That being said...
Any chance that you have special characters in your Admin PIN? Something like non-alphanumeric ones.

Alternatively, try to change the Admin PIN back to the default (12345678) or something similar (at least 8 characters) and run the script again.

Yet another idea is to print you the $PIN variable from within the script and try to see if there is something wrong whit that. I guess that would be the most useful thing.
*** BUT BE CAREFUL, THAT VALUE IT IS THE HEX ENCODING OF YOUR ADMIN PIN. SO POST IT ONLY IF YOU UNDERSTAND THE CONSEQUENCES. ***

Statistics: Posted by Alessio — Thu Feb 18, 2016 10:16 am

yubitouch.sh not working on OS X El Capitan

2016-02-17T12:22:43+01:00

I'm not able to set the Yubikey 4 Touch feature for my PGP sig keys. I run yubitouch.sh like this:

yubitouch.sh sig on

and after entering my Admin PIN I get this output:

"Verification failed, wrong pin?"

When the script runs this command

$GCA --hex "scd apdu 00 20 00 83 $PIN_LEN $PIN" /bye

it gets this as output:

Code:

D[0000]  67 00                                              g.              
OK

Because it doesn't find "90 00" the script then dies.

However, I don't think the PIN is wrong because the Admin PIN attempts counters isn't decremented. If I really put the wrong PIN then the counter is decremented and I get the following response:

Code:

D[0000]  69 82                                              i.              
OK

Statistics: Posted by chrisamin — Wed Feb 17, 2016 12:22 pm