Yubico Forum

Hi,

I have a problem with KSM.
I installed and configured Yubikey Validation Server.
Test seems to be Ok, bacause when I go to http://yubico.mydomain.net/wsapi/verify, answer is :
h=JC1clA/JHRc6O4RSBGKyo7Cm5AU=
t=2014-12-10T08:28:35Z0097
status=MISSING_PARAMETER

Now i want to install KSM, but it doesn't work...
When I test to go to http://yubico.mydomain.net/wsapi/decryp ... wvfdgfgdfd, answer is a white page... no message displayed

Do you have any idea ? I tested on same server that Validation Server, and on an other server, same result...

Other problem, I tested to generate KSM key, using this doc : https://github.com/Yubico/yubikey-ksm/b ... M_Key.adoc
Impossible to generate KSM Key... error message :

We need to generate a lot of random bytes. It is a good idea to perform
some other action (type on the keyboard, move the mouse, utilize the
disks) during the prime generation; this gives the random number
generator a better chance to gain enough entropy.

There is not enough random bytes availables....

The random byte message it is probably because you are on a virtual machine.

The first error, sounds like some php error what is in the error log?

Hi,

thanks a lot for your response.
For the fisrt problem, roger, i'm on a VM.
Now, I have a KSM Key.

So now, just the problem to decrypt the key.
Seems to be a problem with access rights or file missing... strange because I followed the doc step by step...
Maybe because I installed Yubikey Validation Server and KSM on same server...

check permission and sym-links are pointing correctly

also why ykksm-config.php is not in /ksm subfolder ?
/etc/yubico/ksm/ykksm-config.php

you have it ykval

Hi,

Permissions seems to be OK.




For ykksm-config.php, I have it in the two directory :
- /etc/yubico/ksm/
- /etc/yubico/val/

Hi,

All is OK now.
Problem was with path defined...
Copy files from /etc/yubico/ksm to /etc/yubico/val and fix rights and owner solved problem I think..

I created KMS Key.
Now, problem is with Keys generation...

./ykksm-gen-keys 1 5 | gpg -a --encrypt -r C6186423 > /home/val/KSMkeys.txt
gpg: can't open `/home/val/.gnupg/pubring.gpg'
gpg: keydb_search failed: file open error
gpg: C6186423: skipped: file open error
gpg: [stdin]: encryption failed: file open error

Ok found the problem.

Edit /home/val/.bashrc to add :

export GPG_TTY=tty
export PINENTRY_USER_DATA="USE_CURSES=1"

Edit /home/val/.gnupg/gpg.conf tu uncomment :

default-key xxxxxxx