Yubico Forum https://forum.yubico.com/ |
|
[QUESTION] How do I use PKCS#11 keygenerate on Neo? https://forum.yubico.com/viewtopic.php?f=26&t=1782 |
Page 1 of 1 |
Author: | jpmens [ Wed Mar 11, 2015 1:04 pm ] |
Post subject: | [QUESTION] How do I use PKCS#11 keygenerate on Neo? |
Hello, I have a Yubikey Neo with firmware v3.3.0 configured with -m82 (OTP and CCID), and I want to use some code which utilizes the PKCS#11 interface to the smart card. When I attempt to do so, I get an error as shown here: Code: pkcs11-tool --module=/usr/lib/x86_64-linux-gnu/opensc-pkcs11.so --pin 123456 --keypairgen --key-type rsa:1024 --label 'jp1' --id 1 Using slot 2 with a present token (0x5) error: PKCS11 function C_GenerateKeyPair failed: rv = CKR_FUNCTION_NOT_SUPPORTED (0x54) What do I have to set on the Neo to be able to accomplish this? Thanks. |
Author: | Uriel [ Thu Mar 12, 2015 10:04 pm ] |
Post subject: | Re: [QUESTION] How do I use PKCS#11 keygenerate on Neo? |
I would probably start with generating keys via yubico-piv-tool rather than pkcs11-tool. |
Author: | jpmens [ Sat Mar 14, 2015 12:46 pm ] |
Post subject: | Re: [QUESTION] How do I use PKCS#11 keygenerate on Neo? |
That wouldn't help, as the software I want to use needs to generate it's keys via the PKCS#11 interface. The question I'm basically asking is: is this at all possible with the Yubikey Neo? (FWIW, using the piv-tool works.) |
Page 1 of 1 | All times are UTC + 1 hour |
Powered by phpBB® Forum Software © phpBB Group https://www.phpbb.com/ |