rtyler
/
brokenco.de
1
0
Fork 0
Code Pull Requests Releases Activity

Add yubiukey deets

This commit is contained in:
R Tyler Croy 2019-12-25 16:02:30 -08:00
parent d3f301ab9a
commit 98ddfba00e
No known key found for this signature in database
GPG Key ID: E5C92681BEF6CEA2
1 changed files with 43 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

43
_posts/2019-12-25-yubikey-opensuse.md Normal file
View File

@ -0,0 +1,43 @@
---
layout: post
title: "Getting started with a Yubikey on openSUSE"
tags:
- opensuse
- yubikey
- security
---
If the people I know tweet enough about something, eventually I'm bound to
breakdown and just buy the thing. It happened with the Intel NUC, and now it's
happened with [Yubikey](https://www.yubico.com). The Yubikey is a USB-based
security device that can do a _lot_ of things, but in my case I just need it to
act as a security key for a number of websites such as GitHub, Google, and
Twitter. Much to my dismay it did not work exactly as I expected right out of
the box on my openSUSE-based laptop.
With recent versions of Firefox Quantum, basically Firefox released over the
past couple years, Chrome/Chromium, and Opera (apparenlty) a Yubikey can be
used directly within web browsers as an external security key. In my case,
every time I tried to configure the device on sites loaded in either Chromium or Firefox, I simply couldn't make it work. The Yubikey would
instead spit out a random string of garbage. This is one _valid_ mode of the Yubikey,
where it acts like a pretend keyboard and generates One-Time Passwords (OTP).
In my case, I wanted it to act like a Universal 2-Factor authentication device
(U2F).
First try was using the Yubikey manager to poke at the device. This application
can be installed with `zypper in yubikey-manager-qt`. The installed binary is
frustratingly **not** called `yubikey-manager` but instead is named
`ykman-gui`. With that hurdle overcome, I tried to inspect the "FIDO2"
application on the Yubikey but that consistently fail.
Utilizing a mixture of "opensuse" "yubikey" and "u2f" I stumbled into an
openSUSE Buildservice link for a promising package named `u2f-host`. As luck
would have it, the `u2f-host` package ended up being the missing link between
Firefox and my Yubikey. After executing `zypper in u2f-host` and restarting
Firefox, I was able to successfully register and use my Yubikey across a myriad
of websites!
A tiny (nano, actually) Christmas miracle! :)