Yubico Forum

...visit our web-store at store.yubico.com
It is currently Tue Jan 30, 2018 8:47 pm

View unanswered posts | View active topics


Board index » Yubikey » Yubikey NEO

All times are UTC + 1 hour




Post new topic Reply to topic  Page 1 of 1
  [ 5 posts ] 
  Print view Previous topic | Next topic 
Author Message
bobo
PostPosted: Tue Sep 02, 2014 12:42 pm 
Offline

Joined: Tue Sep 02, 2014 11:16 am
Posts: 10
Hello,

I tried hard to load an applet on the Yubikey but without success...

Please note that I correctly configured the Yubikey to allow CCID as described here: http://www.yubico.com/2012/12/yubikey-n ... te-device/

I was also able to load/remove some javacard applets from .cap files generated using the JCDK 2.2.2.

However, I cannot load applet generated from the last JCDK 3.0.4.
For example, I was not able to load the 'HelloWorld' applet provided with the JCDK 3.0.4. compiled by oracle (http://www.oracle.com/technetwork/java/ ... 43229.html).

I also tried to build the HelloWorld cap file from sources but without success. I used Netbeans IDE 8.0 with the java card plugin and JCDK 3.0.4 classic edition on Windows 8 . I received the following error using GPJ to load the cap file:

Code:

F:\Dropbox\NetBeansJava\gpj\gpj-20120310>java -jar gpj.jar -load HelloWorld.cap -install
Found terminals: [PC/SC terminal Yubico Yubikey NEO OTP+CCID 0]
Found card in terminal: Yubico Yubikey NEO OTP+CCID 0
ATR: 3B FA 13 00 00 81 31 FE 15 59 75 62 69 6B 65 79 4E 45 4F A6
DEBUG: Command  APDU: 00 A4 04 00 07 A0 00 00 01 51 00 00
DEBUG: Response APDU: 6A 82
Failed to select Security Domain GP211 A0 00 00 01 51 00 00 , SW: 6A 82
DEBUG: Command  APDU: 00 A4 04 00 08 A0 00 00 00 18 43 4D 00
DEBUG: Response APDU: 6A 82
Failed to select Security Domain GemaltoXpressPro A0 00 00 00 18 43 4D 00 , SW: 6A 82
DEBUG: Command  APDU: 00 A4 04 00 08 A0 00 00 00 03 00 00 00
DEBUG: Response APDU: 6F 65 84 08 A0 00 00 00 03 00 00 00 A5 59 9F 65 01 FF 9F 6E 06 47 91 12 10 38 00 73 4A 06 07 2A 86
 48 86 FC 6B 01 60 0C 06 0A 2A 86 48 86 FC 6B 02 02 01 01 63 09 06 07 2A 86 48 86 FC 6B 03 64 0B 06 09 2A 86 48 86 FC 6B
 04 02 55 65 0B 06 09 2B 85 10 86 48 64 02 01 03 66 0C 06 0A 2B 06 01 04 01 2A 02 6E 01 02 90 00
Successfully selected Security Domain OP201a A0 00 00 00 03 00 00 00
DEBUG: Command  APDU: 80 50 00 00 08 FB A5 CA 3F 44 E7 1A 51
DEBUG: Response APDU: 00 00 31 07 00 63 24 96 70 07 FF 02 00 2D 06 0C DF 9A 37 DD 07 B2 86 E1 76 7A DF 9B 90 00
DEBUG: Command  APDU: 84 82 00 00 10 22 47 D6 85 26 F5 AC 9E 7C 0A CE FF 7F C8 DF 01
DEBUG: Response APDU: 90 00
DEBUG: Command  APDU: 84 82 00 00 08 22 47 D6 85 26 F5 AC 9E
DEBUG: Response APDU: 90 00
DEBUG: packagePath: com/sun/jcclassic/samples/helloworld/javacard/
DEBUG: package: com.sun.jcclassic.samples.helloworld
DEBUG: package AID: A0 00 00 00 62 03 01 0C 01
DEBUG: applet AIDs: [A0 00 00 00 62 03 01 0C 01 01 ]
DEBUG: Command  APDU: 80 E6 02 00 16 09 A0 00 00 00 62 03 01 0C 01 08 A0 00 00 00 03 00 00 00 00 00 00
DEBUG: Response APDU: 00 90 00
DEBUG: Command  APDU: 80 E6 02 00 16 09 A0 00 00 00 62 03 01 0C 01 08 A0 00 00 00 03 00 00 00 00 00 00
DEBUG: Response APDU: 00 90 00
DEBUG: Command  APDU: 80 E8 00 00 FF C4 82 01 43 01 00 13 DE CA FF ED 01 02 04 00 01 09 A0 00 00 00 62 03 01 0C 01 02 00
 1F 00 13 00 1F 00 0E 00 15 00 36 00 0C 00 74 00 0A 00 13 00 00 00 6C 00 00 00 00 00 00 02 01 00 04 00 15 02 05 01 07 A0
 00 00 00 62 01 01 00 01 07 A0 00 00 00 62 00 01 03 00 0E 01 0A A0 00 00 00 62 03 01 0C 01 01 00 14 06 00 0C 00 80 03 01
 00 01 07 01 00 00 00 1F 07 00 74 00 02 10 18 8C 00 01 18 11 01 00 90 0B 87 00 18 8B 00 02 7A 02 30 8F 00 03 3D 8C 00 04
 3B 7A 05 23 19 8B 00 05 2D 1A 03 25 61 0A 1A 04 25 10 A4 6B 03 7A 19 8B 00 06 32 03 29 04 1F 65 1B 1A 08 AD 00 16 04 1F
 8D 00 07 3B 16 04 1F 41 29 04 19 08 8B 00 08 32 70 E6 19 8B 00 09 3B 19 16 04 08 41 8B 00 0A 19 03 08 8B 00 0B 19 AD 00
 03 16 04 8B 00 0C 7A 08 00 0A 00 00 00 00 00 00 00 00 00 00 05 00 36 00 0D 02 00
DEBUG: Response APDU: 6A 80
DEBUG: Command  APDU: 80 E8 00 00 FF C4 82 01 43 01 00 13 DE CA FF ED 01 02 04 00 01 09 A0 00 00 00 62 03 01 0C 01 02 00
 1F 00 13 00 1F 00 0E 00 15 00 36 00 0C 00 74 00 0A 00 13 00 00 00 6C 00 00 00 00 00 00 02 01 00 04 00 15 02 05 01 07 A0
 00 00 00 62 01 01 00 01 07 A0 00 00 00 62 00 01 03 00 0E 01 0A A0 00 00 00 62 03 01 0C 01 01 00 14 06 00 0C 00 80 03 01
 00 01 07 01 00 00 00 1F 07 00 74 00 02 10 18 8C 00 01 18 11 01 00 90 0B 87 00 18 8B 00 02 7A 02 30 8F 00 03 3D 8C 00 04
 3B 7A 05 23 19 8B 00 05 2D 1A 03 25 61 0A 1A 04 25 10 A4 6B 03 7A 19 8B 00 06 32 03 29 04 1F 65 1B 1A 08 AD 00 16 04 1F
 8D 00 07 3B 16 04 1F 41 29 04 19 08 8B 00 08 32 70 E6 19 8B 00 09 3B 19 16 04 08 41 8B 00 0A 19 03 08 8B 00 0B 19 AD 00
 03 16 04 8B 00 0C 7A 08 00 0A 00 00 00 00 00 00 00 00 00 00 05 00 36 00 0D 02 00
DEBUG: Response APDU: 6A 80
net.sourceforge.gpj.cardservices.exceptions.GPLoadException: Load failed, SW: 6A 80
        at net.sourceforge.gpj.cardservices.GlobalPlatformService.loadCapFile(Unknown Source)
        at net.sourceforge.gpj.cardservices.GlobalPlatformService.main(Unknown Source)


Any idea on what causes the problem?

Thanks in advance for your help!
Top
 Profile  
Reply with quote  

Share On:
Share on Facebook FacebookShare on Twitter TwitterShare on Tumblr TumblrShare on Google+ Google+

bobo
PostPosted: Tue Sep 02, 2014 1:03 pm 
Offline

Joined: Tue Sep 02, 2014 11:16 am
Posts: 10
For the sake of completeness, I also tried to load the same Helloworld cap file from oracle with GPShell without success:

Code:
F:\Downloads\Progs\GPShell-1.4.4\GPShell-1.4.4>GPShell.exe gpinstall.txt
mode_211
enable_trace
establish_context
card_connect
select -AID a000000003000000
Command --> 00A4040008A000000003000000
Wrapped command --> 00A4040008A000000003000000
Response <-- 6F658408A000000003000000A5599F6501FF9F6E06479112103800734A06072A864886FC6B01600C060A2A864886FC6B02020101630
906072A864886FC6B03640B06092A864886FC6B040255650B06092B8510864864020103660C060A2B060104012A026E01029000
open_sc -security 1 -keyind 0 -keyver 0 -mac_key 404142434445464748494a4b4c4d4e4f -enc_key 404142434445464748494a4b4c4d4
e4f
Command --> 80CA006600
Wrapped command --> 80CA006600
Response <-- 664C734A06072A864886FC6B01600C060A2A864886FC6B02020101630906072A864886FC6B03640B06092A864886FC6B040255650B0
6092B8510864864020103660C060A2B060104012A026E01029000
Command --> 805000000832462DBE18310D0F00
Wrapped command --> 805000000832462DBE18310D0F00
Response <-- 00003107006324967007FF02002EDA7D1A9E34DA7C090ABAEC9755139000
Command --> 84820100106727A81A39AA12FB4C8DD264E3EF4B88
Wrapped command --> 84820100106727A81A39AA12FB4C8DD264E3EF4B88
Response <-- 9000
install -file helloworld-sun.cap -instParam 00 -priv 00
Command --> 80E602001C09A00000006203010C0108A0000000030000000006EF04C60201C00000
Wrapped command --> 84E602002409A00000006203010C0108A0000000030000000006EF04C60201C00057B690DAA536FBA700
Response <-- 009000
Command --> 80E80000EFC48201B2010013DECAFFED010204000109A00000006203010C0102001F0013001F000E00150036000C0074000A00130000
006C00000000000002010004001502050107A0000000620101000107A000000062000103000E010AA00000006203010C0101001406000C0080030100
0107010000001F070074000210188C000118110100900B8700188B00027A02308F00033D8C00043B7A0523198B00052D1A0325610A1A042510A46B03
7A198B0006320329041F651B1A08AD0016041F8D00073B16041F41290419088B00083270E6198B00093B19160408418B000A1903088B000B19AD0003
16048B000C7A08000A00
Wrapped command --> 84E80000F7C48201B2010013DECAFFED010204000109A00000006203010C0102001F0013001F000E00150036000C0074000A
00130000006C00000000000002010004001502050107A0000000620101000107A000000062000103000E010AA00000006203010C0101001406000C00
800301000107010000001F070074000210188C000118110100900B8700188B00027A02308F00033D8C00043B7A0523198B00052D1A0325610A1A0425
10A46B037A198B0006320329041F651B1A08AD0016041F8D00073B16041F41290419088B00083270E6198B00093B19160408418B000A1903088B000B
19AD000316048B000C7A08000A009C91E10B50BF7E4B
Response <-- 6A80
load() returns 0x80206A80 (6A80: Wrong data / Incorrect values in command data.)
Top
 Profile  
Reply with quote  
Tom
PostPosted: Tue Sep 02, 2014 2:17 pm 
Offline
Site Admin
Site Admin

Joined: Wed Nov 14, 2012 2:59 pm
Posts: 666
What serial number is your Yubikey NEO?

http://www.yubico.com/2014/07/yubikey-neo-updates/

_________________
-Tom
Top
 Profile  
Reply with quote  
bobo
PostPosted: Tue Sep 02, 2014 3:30 pm 
Offline

Joined: Tue Sep 02, 2014 11:16 am
Posts: 10
hello,

The serial number on my Yubikey is 2276188 (thus below 3000000).
I don't think the problem is related to the card manager keys, since I am able to load/delete some applets built with JCDK 2.2.2

As far as I know, the applets sources provided by Yubikey (eg. ykneo-openpgp, ykneo-oath) are all built using the 'old' JCDK 2.2.2.
The problem comes when I try to load applets build with JCDK 3.0.4.

Is there a specific guide for building cap file with JCDK 3.0.4 (similar to https://github.com/Yubico/ykneo-openpgp ... ilding.txt for jcdk-2.2.2)?

Currently, I use Netbeans 8.0 IDE with the Javacard plugin made by Tim Boudreau and the JCDK 3.0.4 on Windows 8 (https://netbeans.org/kb/docs/javame/java-card.html). The cap file is generated without error but I cannot load it on the Yubikey.
Top
 Profile  
Reply with quote  
Tom
PostPosted: Wed Sep 03, 2014 8:39 am 
Offline
Site Admin
Site Admin

Joined: Wed Nov 14, 2012 2:59 pm
Posts: 666
Here, in the lab I have success with a 3.0.1 unfortunately I don't know about 3.0.4

Will check.

_________________
-Tom
Top
 Profile  
Reply with quote  
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 1 of 1
  [ 5 posts ] 

Board index » Yubikey » Yubikey NEO

All times are UTC + 1 hour


Who is online

Users browsing this forum: No registered users and 7 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB® Forum Software © phpBB Group