Yubico Forum

...visit our web-store at store.yubico.com
It is currently Wed Oct 18, 2017 12:59 am

All times are UTC + 1 hour




Post new topic Reply to topic  [ 3 posts ] 
Author Message
PostPosted: Sat Apr 02, 2016 8:37 pm 
Offline

Joined: Sat Apr 02, 2016 8:22 pm
Posts: 2
Hi,
due to an [eventual] bug in Latvian eID software, it is not possible to use eID card together with Yubikey.
OK, I thought, because Yubikey supports PIV, I could "clone" my eID to Yubikey and use it for all my needs.
I successfully copied certificates from eID to Yubikey with PIV tool.

Now I do not understand how an application could possibly use Yubikey as eID.
What needs to be done for a browser to "know" that Yubikey must be queried? I use Mac OS X 10.11 and Safari and Firefox.
eID card has a browser plugin. Does such thing exists for Yubikey? Or is there a generic plugin?

Sorry for my lameness and thanks for your time.
shpokas


Top
 Profile  
Reply with quote  

Share On:

Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

PostPosted: Tue Apr 05, 2016 8:52 am 
Offline
Site Admin
Site Admin

Joined: Mon Dec 08, 2014 2:52 pm
Posts: 313
I think you should ask this question at Latvian eID Forum.

Yes, they could store your cert on the YubiKey but they need to build support for it in their PKCS11 module (plugin ...etc)

Normally you cannot extract the private key from your smartcard, if that is possible with your Latvian eID there is something very wrong there, unless it is by design for some unique reasons.

Note that i do not know how Latvian eID works, so I might be wrong.


Top
 Profile  
Reply with quote  
PostPosted: Tue Apr 05, 2016 1:13 pm 
Offline

Joined: Sat Apr 02, 2016 8:22 pm
Posts: 2
Thanks for reply!
Tom2 wrote:
Normally you cannot extract the private key from your smartcard, if that is possible with your Latvian eID there is something very wrong there, unless it is by design for some unique reasons.

Indeed, somehow I misssed this part :D
Naturally, I need private key to authenticate and sign anything.
Anyway, learned a bit anyway and I hope eID developers will fix their software so that Yubikey can be used together with eID.
Br,
shpokas


Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 3 posts ] 

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group