Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Software mock for yubikey / pkcs11 #162

Open
emostov opened this issue Nov 10, 2022 · 2 comments
Open

Software mock for yubikey / pkcs11 #162

emostov opened this issue Nov 10, 2022 · 2 comments

Comments

@emostov
Copy link
Contributor

emostov commented Nov 10, 2022

In order to do automated testing of our yubikey functionality, we need to be able to mock a yubikey card on any machine.

We may be able to do this by finding a PKCS 11 emulator.

Resources to look into:

@cr-tk
Copy link
Collaborator

cr-tk commented Nov 22, 2022

I'm aware of https://github.com/opendnssec/SoftHSMv2 as a software PKCS#11 emulator. As discussed, I doubt that it'll behave exactly like the Yubikey 5 series firmwares would, but it may be a start.

@cr-tk
Copy link
Collaborator

cr-tk commented Nov 22, 2022

Looking at the open SoftHSMv2 issues and PRs, it appears that, as expected, it behaves differently under some edge cases than other PKCS#11 targets would, see OpenSC/libp11#440 . This may be an isolated issue, but highlights the need to check against actual Yubikey firmware behavior at some later point even if tests based on SoftHSMv2 run through without issues.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants