Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support Google Titan (Feitian) in Qubes U2F Proxy #5400

Closed
devrandom opened this issue Oct 18, 2019 · 10 comments
Closed

Support Google Titan (Feitian) in Qubes U2F Proxy #5400

devrandom opened this issue Oct 18, 2019 · 10 comments

Comments

@devrandom
Copy link

Google Titan U2F keys (Feitian 096e:0858 and 096e085b) don't work with the proxy.

Example dmesg output:

[911837.578570] usb 2-6: new full-speed USB device number 15 using xhci_hcd
[911837.705141] usb 2-6: New USB device found, idVendor=096e, idProduct=0858, bcdDevice=46.00
[911837.705174] usb 2-6: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[911837.705202] usb 2-6: Product: U2F
[911837.705236] usb 2-6: Manufacturer: FT
[911837.707066] hid-generic 0003:096E:0858.004C: hiddev96,hidraw4: USB HID v1.00 Device [FT U2F] on usb-0000:00:08.0-6/input0

and the Bluetooth enabled version:

[911981.685582] usb 2-6: new full-speed USB device number 18 using xhci_hcd
[911981.824481] usb 2-6: New USB device found, idVendor=096e, idProduct=085b, bcdDevice=35.02
[911981.824521] usb 2-6: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[911981.824554] usb 2-6: Product: ePass FIDO
[911981.824591] usb 2-6: Manufacturer: FS
[911981.833470] hid-generic 0003:096E:085B.0050: hiddev96,hidraw4: USB HID v1.10 Device [FS ePass FIDO] on usb-0000:00:08.0-6/input0

Yubikeys work in the same setup.

Happy to help in any way.

@devrandom devrandom added P: default Priority: default. Default priority for new issues, to be replaced given sufficient information. T: enhancement labels Oct 18, 2019
@marmarek
Copy link
Member

Do you see any messages related to u2f.* service calls in sys-usb's journal? You can enable debugging by creating empty /etc/qubes/u2f-debug-enable file.
I wonder if that's some communication issue, or those are simply not recognized as U2F keys. We use python-u2flib-host for communicating with U2F keys, including enumerating them - maybe it isn't recognized?

@andrewdavidwong andrewdavidwong added this to the Far in the future milestone Oct 19, 2019
@devrandom
Copy link
Author

Yeah, I'm getting mux no device, sending fake... and the following code generates no output:

#!/usr/bin/python3
from u2flib_host import u2f, exc

# Enumerate available devices
devices = u2f.list_devices()

for device in devices:
    print(device)

@devrandom
Copy link
Author

Actually, it works fine when adding to their hid_transport.py, will submit a pull request there.

marmarek added a commit to marmarek/qubes-python-u2flib-host that referenced this issue Jun 11, 2020
There are a bunch of new devices added to the white list there.

Fixes QubesOS/qubes-issues#5400
@qubesos-bot
Copy link

Automated announcement from builder-github

The package python3-u2flib-host-3.0.3-4.fc25 has been pushed to the r4.0 testing repository for dom0.
To test this update, please install it with the following command:

sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing

Changes included in this update

@qubesos-bot
Copy link

Automated announcement from builder-github

The package python-u2flib-host-3.0.3-4.fc32 has been pushed to the r4.1 testing repository for dom0.
To test this update, please install it with the following command:

sudo qubes-dom0-update --enablerepo=qubes-dom0-current-testing

Changes included in this update

@qubesos-bot
Copy link

Automated announcement from builder-github

The package python-u2flib-host_3.0.3-5 has been pushed to the r4.0 testing repository for the Debian template.
To test this update, first enable the testing repository in /etc/apt/sources.list.d/qubes-*.list by uncommenting the line containing stretch-testing (or appropriate equivalent for your template version), then use the standard update command:

sudo apt-get update && sudo apt-get dist-upgrade

Changes included in this update

@qubesos-bot
Copy link

Automated announcement from builder-github

The package python3-u2flib-host-3.0.3-5.fc25 has been pushed to the r4.0 stable repository for dom0.
To install this update, please use the standard update command:

sudo qubes-dom0-update

Or update dom0 via Qubes Manager.

Changes included in this update

@qubesos-bot
Copy link

Automated announcement from builder-github

The package python-u2flib-host_3.0.3-5+deb9u1 has been pushed to the r4.0 stable repository for the Debian template.
To install this update, please use the standard update command:

sudo apt-get update && sudo apt-get dist-upgrade

Changes included in this update

@qubesos-bot
Copy link

Automated announcement from builder-github

The package python-u2flib-host_3.0.3-5+deb9u1 has been pushed to the r4.1 stable repository for the Debian template.
To install this update, please use the standard update command:

sudo apt-get update && sudo apt-get dist-upgrade

Changes included in this update

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants