libu2f-host fails to connect to YubiKey NEO on Mac OS X about libu2f-host HOT 6 CLOSED

On what version of osx is this?

Actually.. there are some problems with hidapi on mac with composite devices. There are patches floating around for this that should probably be applied in the build. Can you try if you have better luck with the otp interface disabled?

from libu2f-host.

On what version of osx is this?

Mac OS X 10.11.6, current patchlevel.

Actually.. there are some problems with hidapi on mac with composite devices. There are patches floating around for this that should probably be applied in the build.

Might I ask to apply those patches to the Mac release of u2f-host package?

Can you try if you have better luck with the otp interface disabled?

I could, but the problem is I need OTP because MIT in its wisdom settled for that as its second factor.

from libu2f-host.

I've put a build with patches for this at https://drive.google.com/folderview?id=0B0zR9vQ-EC8yNGdpN3YtRXdBZ0E&usp=sharing could you try with that?

If it still fails please post the output of the u2f-host binary with -d

I actually have a feeling this wont work, this fix is for errors that look different where it times out instead of managing to send a receive data. I will probably have to look deeper into this.

from libu2f-host.

I've put a build with patches for this at...

Thank you! I've retrieved it - but this build lacks discover-test executable. I cannot really test u2f-host now because I'm still trying to put together the infrastructure. So I don't have a working running server - just the likelihood that u2fval would do the job as it now installs and seems to be able to run, and I don't have a working reliable client. All I know is that the token works, because it passes the Yubico demo test (https://demo.yubico.com/u2f?tab=login) and allows me to login to Google using U2F as 2nd factor.

So I'd like to validate by running discover-test and demo.c rather than jumping head-first into u2f-host.

Copying discover-test from the original release to bin/ of the one you shared:

$ bin/discover-test -d
USB send: 00ffffffff8600080807060504030201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
USB write returned 65
now trying with timeout 2
USB read rc read 64
USB recv: ffffffff86001108070605040302017b05b84d020101000100000000000000000000000000000000000000000000000000000000000000000000000000000000
device IOService:/AppleACPIPlatformExpert/PCI0@0/AppleACPIPCI/XHC1@14/XHC1@14000000/HS01@14100000/Yubikey NEO OTP+U2F+CCID@14100000/IOUSBHostInterface@1/IOUSBHostHIDDevice@14100000,1 discovered as 'Yubikey NEO OTP+U2F+CCID'
  version (Interface, Major, Minor, Build): 2, 1, 1, 0  capFlags: 1
max: 0
USB send: 00ffffffff8600080807060504030201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
USB write returned 65
now trying with timeout 2
USB read rc read 64
USB recv: ffffffff86001108070605040302017c05b84d020101000100000000000000000000000000000000000000000000000000000000000000000000000000000000
device IOService:/AppleACPIPlatformExpert/PCI0@0/AppleACPIPCI/XHC1@14/XHC1@14000000/HS01@14100000/Yubikey NEO OTP+U2F+CCID@14100000/IOUSBHostInterface@1/IOUSBHostHIDDevice@14100000,1 discovered as 'Yubikey NEO OTP+U2F+CCID'
  version (Interface, Major, Minor, Build): 2, 1, 1, 0  capFlags: 1
max: 0
USB send: 00ffffffff8600080807060504030201000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
. . . . . [and so on ad infinitum] . . . . .

The demo.c (full source above) gives the same SEGV:

$ clang -o demo -Iinclude demo.c -Llib/ -lhidapi
$ ./demo
Sucessfully initialized HID API...
Successfully opened HID device...
Segmentation fault: 11
$

from libu2f-host.

So discover-test was a debug application that wasn't meant to go out in the build, it wasn't polished enough so I dropped it. Though you can run the following to test u2f-host (and create a registration for demo.yubico.com):
$ echo '{"challenge": "r9fTzquf4wuTMi4MUR5Nfhnm9q8wTJHjT0dczTrCWQQ", "version": "U2F_V2", "appId": "https://demo.yubico.com"}' | ./u2f-host -a register -d -o 'https://demo.yubico.com/

The output of discover-test looks about right though. I'll replace the mac build with this fixed or make a new release if you confirm that u2f-host works as well.

from libu2f-host.

@klali I think it worked. Sent you a private email with the complete output. It did a ton of exchange with the token, and in the end there was this:

{ "registrationData": "BQ. . . . .j3. . . . .OmDtlFyuCIdqqCzlwSXkxmzc8nA", "clientData": "eyAiY2h. . . . .QiIH0" }

from libu2f-host.