Yubico Forum

[SOLVED] Generate KSM-KEY

2014-12-24T16:46:53+01:00

Ok found the problem.

Edit /home/val/.bashrc to add :

export GPG_TTY=tty
export PINENTRY_USER_DATA="USE_CURSES=1"

Edit /home/val/.gnupg/gpg.conf tu uncomment :

default-key xxxxxxx

Statistics: Posted by gpr — Wed Dec 24, 2014 4:46 pm

Re: Generate KSM-KEY

2014-12-24T10:50:52+01:00

Hi,

All is OK now.
Problem was with path defined...
Copy files from /etc/yubico/ksm to /etc/yubico/val and fix rights and owner solved problem I think..

I created KMS Key.
Now, problem is with Keys generation...

./ykksm-gen-keys 1 5 | gpg -a --encrypt -r C6186423 > /home/val/KSMkeys.txt
gpg: can't open `/home/val/.gnupg/pubring.gpg'
gpg: keydb_search failed: file open error
gpg: C6186423: skipped: file open error
gpg: [stdin]: encryption failed: file open error

Statistics: Posted by gpr — Wed Dec 24, 2014 10:50 am

Re: Generate KSM-KEY

2014-12-23T17:39:41+01:00

Hi,

Permissions seems to be OK.

Code:

/usr/share/yubikey-ksm$ ls -l
total 12
-rwx------ 1 www-data root 4557 nov.  13 16:57 ykksm-decrypt.php
-rw-r----- 1 root     root 2428 nov.  13 16:57 ykksm-utils.php

For ykksm-config.php, I have it in the two directory :
- /etc/yubico/ksm/
- /etc/yubico/val/

Statistics: Posted by gpr — Tue Dec 23, 2014 5:39 pm

Re: Generate KSM-KEY

2014-12-22T10:17:55+01:00

check permission and sym-links are pointing correctly

also why ykksm-config.php is not in /ksm subfolder ?
/etc/yubico/ksm/ykksm-config.php

you have it ykval

Statistics: Posted by Tom2 — Mon Dec 22, 2014 10:17 am

Re: Generate KSM-KEY

2014-12-19T15:22:45+01:00

Hi,

thanks a lot for your response.
For the fisrt problem, roger, i'm on a VM.
Now, I have a KSM Key.

So now, just the problem to decrypt the key.
Seems to be a problem with access rights or file missing... strange because I followed the doc step by step...
Maybe because I installed Yubikey Validation Server and KSM on same server...

Code:

/var/log/apache2$ tail ykval-error.log

[Fri Dec 19 14:07:21 2014] [error] [client 46.x.x.x] PHP Warning:  require_once(/etc/yubico/val/ykksm-config.php): failed to open stream: Permission denied in /usr/share/yubikey-ksm/ykksm-decrypt.php on line 31
[Fri Dec 19 14:07:21 2014] [error] [client 46.x.x.x] PHP Fatal error:  require_once(): Failed opening required 'ykksm-config.php' (include_path='.:/etc/yubico/val:/usr/share/yubikey-val') in /usr/share/yubikey-ksm/ykksm-decrypt.php on line 31

Statistics: Posted by gpr — Fri Dec 19, 2014 3:22 pm

Re: Generate KSM-KEY

2014-12-12T14:43:13+01:00

The random byte message it is probably because you are on a virtual machine.

The first error, sounds like some php error what is in the error log?

Statistics: Posted by Tom2 — Fri Dec 12, 2014 2:43 pm

Generate KSM-KEY

2014-12-10T16:33:22+01:00

Hi,

I have a problem with KSM.
I installed and configured Yubikey Validation Server.
Test seems to be Ok, bacause when I go to http://yubico.mydomain.net/wsapi/verify, answer is :
h=JC1clA/JHRc6O4RSBGKyo7Cm5AU=
t=2014-12-10T08:28:35Z0097
status=MISSING_PARAMETER

Now i want to install KSM, but it doesn't work...
When I test to go to http://yubico.mydomain.net/wsapi/decryp ... wvfdgfgdfd, answer is a white page... no message displayed

Do you have any idea ? I tested on same server that Validation Server, and on an other server, same result...

Other problem, I tested to generate KSM key, using this doc : https://github.com/Yubico/yubikey-ksm/b ... M_Key.adoc
Impossible to generate KSM Key... error message :

We need to generate a lot of random bytes. It is a good idea to perform
some other action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number
generator a better chance to gain enough entropy.

There is not enough random bytes availables....

Statistics: Posted by gpr — Wed Dec 10, 2014 4:33 pm