Bug 1921519

Upstream has responded and is planning to have release 4 available in the March/April time frame.  For me information, refer to the upstream bug.

*** Bug 1923620 has been marked as a duplicate of this bug. ***

This package is dependency of yubikey-manager-qt, which now fails to build as this package is not possible to install. Is there some way to unbreak this at least temporarily sooner than the release will come?

Seems like fido2 changed the API: https://github.com/Yubico/python-fido2/blob/master/NEWS

Upstream has declared yubikey-manager doesn't work with it: https://github.com/Yubico/yubikey-manager/commit/10242d411db8945d84cbc5142e4e0964c32bf9ec

Seems to have been real issues, because they released a new version of yubikey-manager with this declaration.

Since yubikey-manager is the only consumer of fido2 in Fedora, a solution would be to revert back to fido2 0.8.x and introduce an epoch.

CCing Orion, wrt https://src.fedoraproject.org/rpms/python-fido2/c/c3eaa1a61cd9d26f01b8ed32a3af1f93b2a0c91f?branch=master -- can this be reverted with epoch bump? Or was the update needed for something outside of Fedora?

I simply updated fido2 because there was an update.  It can be reverted.

(In reply to Orion Poplawski from comment #5)
> I simply updated fido2 because there was an update.  It can be reverted.

Everyone, please remember that the updated yubikey-manager will be available in the March/April timeframe, and it will need the new
Fido2.

Thanks!

Here is the latest update:

> I've now released an alpha: 4.0.0a1. It's published to PyPI and also tagged in this repo.
> Note that we also just released python-fido2 0.9.1 to include some error code definitions that were missing in the 0.9.0 release.
>
> There are substantial build-system changes to ykman 4.0.0, I hope these do not cause issues for packaging. If they do, let us know and we'll see what we can do about it!

I'm going to build and put it out on rawhide.  The production version is now scheduled to be released by the end of February.

@Orion, if you could put 0.9.1 out on rawhide, that would be appreciated!

Building - https://koji.fedoraproject.org/koji/taskinfo?taskID=61251751

Hello,

Please note that this comment was generated automatically. If you feel that this output has mistakes, please contact me via email (mhroncok).

All subpackages of a package against which this bug was filled are now installable or removed from Fedora 34.

Thanks for taking care of it!

yubioath-desktop issue fixed with this commit, which has been pushed to rawhide and F34:
https://github.com/Yubico/yubikey-manager/commit/d3802d4bd2a23ee50351605d59d55d8f5d9d5577

Gerald - I'm starting to look at getting yubikey-manager into EPEL8.  Do you think I should go ahead and start with fido2 0.9.1 or use an older version.  I've built 0.9.1 and the latest ykman from rawhide on EL8 and it at least runs, though I've hit one traceback:

  File "/usr/lib/python3.6/site-packages/ykman/driver_fido.py", line 97, in open_devices
    for dev in CtapHidDevice.list_devices(descriptor_filter):
TypeError: list_devices() takes 1 positional argument but 2 were given

That's from running "ykman fido info"

(In reply to Orion Poplawski from comment #11)
> Gerald - I'm starting to look at getting yubikey-manager into EPEL8.  Do you
> think I should go ahead and start with fido2 0.9.1 or use an older version. 
> I've built 0.9.1 and the latest ykman from rawhide on EL8 and it at least
> runs, though I've hit one traceback:
> 
>   File "/usr/lib/python3.6/site-packages/ykman/driver_fido.py", line 97, in
> open_devices
>     for dev in CtapHidDevice.list_devices(descriptor_filter):
> TypeError: list_devices() takes 1 positional argument but 2 were given

I'm not a python expert, but my first guess is that the newer code which was recently
changed for python 3.9 has something that is now not compatible with earlier releases.

You may be stuck with having to use the older releases with EPEL.

yubikey-manager 4.0.0

Repository: Yubico/yubikey-manager · Tag: 4.0.0

    Drop support for Python < 3.6.
    Drop reliance on libusb and libykpersonalize.
    Support the "fido" and "otp" subcommands over NFC (using the --reader flag)
    New "ykman --diagnose" command to aid in troubleshooting.
    New "ykman apdu" command for sending raw APDUs over the smart card interface.
    Restructuring of subcommands, with aliases for old versions (to be removed in a future release).
    Major changes to the underlying "library" code:
        New "yubikit" package added for custom development and advanced scripting.
        Type hints added for a large part of the "public" API.
    OpenPGP: Add support for KDF enabled YubiKeys.
    Static password: Add support for FR, IT, UK and BEPO keyboard layouts.

FEDORA-2021-e865492fe2 has been submitted as an update to Fedora 34. https://bodhi.fedoraproject.org/updates/FEDORA-2021-e865492fe2

FEDORA-2021-e865492fe2 has been pushed to the Fedora 34 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --advisory=FEDORA-2021-e865492fe2`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2021-e865492fe2

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

FEDORA-2021-e865492fe2 has been pushed to the Fedora 34 stable repository.
If problem still persists, please make note of it in this bug report.

FEDORA-2021-e865492fe2 has been pushed to the Fedora 34 stable repository.
If problem still persists, please make note of it in this bug report.