Unable to register with any U2F device.

Question

Unable to register with any U2F device.

huskyachao opened this issue 6 years ago · 21 comments

I've been tring to make the U2F-zero interact with U2F-host(https://github.com/Yubico/python-u2flib-host),but it doesn't work any more. The result is as following:

~$ u2f-register -i reg.json http://localhost:8081

Touch the U2F device you wish to register...

Unable to register with any U2F device.

Is it because the slots is full?? or else? It troubles me a lot.I would be very thankful if someone could help me out.

huskyachao commented 6 years ago

OK~

conorpp commented 6 years ago

yes

Answer 1 · 2019-01-03T03:03:20.000Z

what operating system and browser are you using? u2f zero supports unlimited registrations.

Answer 2 · 2019-01-03T03:04:53.000Z

Ubuntu 18.04.1 LTS
No browser, just the command line.

Answer 3 · 2019-01-03T03:05:40.000Z

did you set a udev rule?
https://github.com/conorpp/u2f-zero/wiki/Using-U2F-Token-on-Linux-(udev)

Answer 4 · 2019-01-03T03:09:01.000Z

did you set a udev rule?
https://github.com/conorpp/u2f-zero/wiki/Using-U2F-Token-on-Linux-(udev)

Oh god, I haven't do that.Thanks~

Answer 5 · 2019-01-03T03:14:51.000Z

Oh....I meet with another problem.There is no 70-u2f.rule in my /etc/udev/rules.d, but a 70-snap.core.rules.
Did I miss someting?

Answer 6 · 2019-01-03T03:15:35.000Z

You have to create the file

Answer 7 · 2019-01-03T03:27:50.000Z

It doesn't work. What would happen if all the 15 slots is full?

Answer 8 · 2019-01-03T03:29:07.000Z

can you try running it as root? there should be no 15 slot limit unless your device is 2 years old

Answer 9 · 2019-01-03T03:39:53.000Z

It still doesn't work... Besides, when I do the HID-test, it meet with a problem as follows:
PASS(test_Idle())
PASS(test_Init())
PASS(test_BasicInit())
PASS(test_Unknown(U2FHID_SYNC))
PASS(test_InitOnNonBroadcastEchoesCID())
PASS(test_InitUnderLock())
PASS(test_InitSelfAborts())
PASS(test_InitOther())
PASS(test_OptionalWink())
PASS(test_Lock())
PASS(test_Echo())
CHECK_LE fail at test_LongEcho[148]:sent > .075: 已放弃

Answer 10 · 2019-01-03T03:41:31.000Z

yes it's a little slow, that particular test shouldn't be an issue. What about the U2F test?

Answer 11 · 2019-01-03T03:53:36.000Z

yes it's a little slow, that particular test shouldn't be an issue. What about the U2F test?

Oh,I haven't try it yet. I will try it after lunch. :)

Answer 12 · 2019-01-03T05:15:38.000Z

Here is the result of U2FTest, it seems that there is some problems with enroll:

$ sudo ./U2FTest /dev/hidraw6
PASS(check_Compilation())
PASS(test_Version())
PASS(test_UnknownINS())
PASS(test_WrongLength_U2F_VERSION())
PASS(test_WrongLength_U2F_REGISTER())
PASS(test_BadCLA())
PASS(test_Enroll(0x6985))

Touch device and hit enter..

CHECK_EQ fail at test_Enroll[134]:expectedSW12 != U2Fob_apdu(device, 0, U2F_INS_REGISTER, U2F_AUTH_ENFORCE, 0, string(reinterpret_cast<char*>(&regReq), sizeof(regReq)), &rsp): 已放弃

Answer 13 · 2019-01-04T04:47:51.000Z

Where/when did you get your token?

Answer 14 · 2019-01-04T09:18:07.000Z

about 2016.11 I guess. It was given by my friend.

Answer 15 · 2019-01-04T09:27:11.000Z

Actually, It worked well when last summer(about 2018.5). My friend changed something about it ,but he forgot which part had been changed. I don't think it's a fatal error.

Answer 16 · 2019-01-04T10:30:53.000Z

when I try to test it in the , https://demo.yubico.com/u2f?tab=register，it returns that

Registration failed!
Make sure you have a U2F device connected, and try again.

Traceback (most recent call last):
File "/root/python-u2flib-server-demo/examples/yubiauth_server.py", line 161, in call
raise Exception("FIDO Client error: %s" % error)
Exception: FIDO Client error: 1 (OTHER ERROR)

And during the time, the LED on the board turn red from green , what does the red light mean?

Answer 17 · 2019-01-06T16:55:06.000Z

There was an issue with a particular U2F "CHECK-ONLY" command, which is used to see if a key handle is owned by a U2F token. Needed to be used when there are multiple U2F tokens, some services always use it first. This has since been fixed but it's likely your token has this problem :(

You can exchange it with the channel you or your friend got it from.

Answer 18 · 2019-01-06T17:13:08.000Z

There was an issue with a particular U2F "CHECK-ONLY" command, which is used to see if a key handle is owned by a U2F token. Needed to be used when there are multiple U2F tokens, some services always use it first. This has since been fixed but it's likely your token has this problem :(

You can exchange it with the channel you or your friend got it from.

You mean the old version of firmware has this problem and it has been fixed in the latest firmware now?

Answer 19 · 2019-01-08T04:11:15.000Z

Can I update the firmware into the u2f-zero by myself?
I don't have a programmer so I have to use the bootloader method.when I use the command "python client.py bootloader" ,it turns out that

~/u2f-zero/tools/u2f_zero_client$ python client.py bootloader
opened None
If this device has an enabled bootloader, the LED should be turned off.

But I found that the LED is still on(green). Am I do the right steps if I want to change the u2f-zero into bootloader mod ? @conorpp