Bug 2136583 - yubikey-manager - upstream release 5.0.0
Summary: yubikey-manager - upstream release 5.0.0
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: yubikey-manager
Version: 38
Hardware: All
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Gerald Cox
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
: 2188544 (view as bug list)
Depends On:
Blocks: 2143787 2144339 2166928
TreeView+ depends on / blocked
 
Reported: 2022-10-20 17:03 UTC by Gerald Cox
Modified: 2023-04-21 09:31 UTC (History)
3 users (show)

Fixed In Version: yubikey-manager-5.0.0-1.20221020git2bf6515.fc38
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2023-02-20 14:14:16 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Github Yubico yubikey-manager issues 523 0 None open After upgrade to 5.0.0 Yubikey-Authenticator 5.1.0 no longer working 2022-10-21 11:04:31 UTC
Red Hat Bugzilla 2166928 0 unspecified CLOSED yubikey-manager-qt 1.2.5 is available 2023-02-07 10:38:46 UTC

Description Gerald Cox 2022-10-20 17:03:20 UTC
yubikey-manager 5.0.0

Repository: Yubico/yubikey-manager · Tag: 5.0.0 · Commit: 2bf6515 · Released by: dainnilsson

Version 5.0.0 (released 2022-10-19)

    Various cleanups and improvements to the API.
    Improvements to the handling of YubiKeys and connections.
    Command aliases for ykman 3.x (introduced in ykman 4.0) have now been dropped.
    Installers for ykman are now provided for Windows (amd64) and MacOS (universal2).
    Logging has been improved, and a new TRAFFIC level has been introduced.
    The codebase has been improved for scripting usage, either directly as a Python module, or via the new "ykman script" command.
    See doc/Scripting.adoc, doc/Library_Usage.adoc, and examples/ for more details.
    PIV: Add support for dotted-string OIDs when parsing RFC4514 strings.
    PIV: Drop support for signing certificates and CSRs with SHA-1.
    FIDO: Credential management commands have been improved to deal with ambiguity in certain cases.
    OATH: Access Keys ("remembered" passwords) are now stored in the system keyring.
    OpenPGP: Commands have been added to manage PINs.

—

Comment 1 Fedora Update System 2022-10-20 17:42:02 UTC
FEDORA-2022-6133c99e5a has been submitted as an update to Fedora 38. https://bodhi.fedoraproject.org/updates/FEDORA-2022-6133c99e5a

Comment 2 Gerald Cox 2022-10-20 17:44:27 UTC
Cannot build for F36 due to dependency issues:
Failed build dependencies:
        (python3dist(fido2) < 2~~ with python3dist(fido2) >= 1) is needed by yubikey-manager-5.0.0-1.20221020git2bf6515.fc38.noarch
        (python3dist(pyscard) < 3~~ with python3dist(pyscard) >= 2) is needed by yubikey-manager-5.0.0-1.20221020git2bf65

Comment 3 Fedora Update System 2022-10-20 17:53:52 UTC
FEDORA-2022-6133c99e5a has been pushed to the Fedora 38 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 4 Gerald Cox 2022-10-20 17:55:43 UTC
@orion is it possible to get fido2 and pyscard upgraded without you having a bunch of dependency issues?  
If not, no problems, but that means yubikey-manager will remain at 4.0.9 for F36.  Thanks!

Comment 5 Fedora Update System 2022-10-20 17:57:30 UTC
FEDORA-2022-4c1f8956da has been submitted as an update to Fedora 37. https://bodhi.fedoraproject.org/updates/FEDORA-2022-4c1f8956da

Comment 6 Gerald Cox 2022-10-21 11:04:32 UTC
(In reply to Fedora Update System from comment #5)
> FEDORA-2022-4c1f8956da has been submitted as an update to Fedora 37.
> https://bodhi.fedoraproject.org/updates/FEDORA-2022-4c1f8956da

Unpushed F37 update.
yubikey-manager 5.0 not compatible with current yubikey-authenticator 5.1.0
delayed until yubikey-authenticator 6.0.0 is available, which should be before 
end of 2022.

Comment 7 Orion Poplawski 2022-10-23 00:59:50 UTC
In light of this last issue, are you still looking to update F36?  The stack has felt fragile enough that I think I'd rather not try updating F36.

Comment 8 Gerald Cox 2022-10-23 14:54:36 UTC
(In reply to Orion Poplawski from comment #7)
> In light of this last issue, are you still looking to update F36?  The stack
> has felt fragile enough that I think I'd rather not try updating F36.

Yeah, I agree.  I'll just deal with F37 and rawhide.  Thanks for the response!

Comment 9 Fedora Update System 2022-11-16 17:05:26 UTC
FEDORA-2022-ab89283605 has been submitted as an update to Fedora 37. https://bodhi.fedoraproject.org/updates/FEDORA-2022-ab89283605

Comment 10 Gerald Cox 2022-11-16 17:44:47 UTC
yubioath-authenticator starting with version 6.0.0 is now flutter based.  flutter is not currently supported by fedora and is not in
the production repositories.  The current yubioath-authenticator version 5.0.0 series is no longer supported and is not compatible with
version 5 of yubikey-manager.  Additionally, the current version of yubikey-manager-qt is not compatible with version 5.0.0 of yubikey-manager.

I have requested that yubikey-manager-qt put a requires statement that will prevent anyone using yubikey-manager-qt from upgrading to version 5.0.0 of
yubikey-manager.  I have modified yubioath-authenticator in the same manner.  

Upstream has no schedule yet to modify yubikey-manager-qt to make it compatible with yubikey-manager v5.  

Going forward, at least until I can investigate if it is even possible to package the flutter based yubioath-authenticator, people needing that functionality
can either install the snap version of yubioath-authenticator (flatpak isn't available), or they can manually install the flutter based version by:
1. Downloading the linux archive:  https://developers.yubico.com/yubioath-flutter/Releases/
2. cd $home
3. tar -xvf yubico-authenticator-6.0.0-linux.tar.gz
4. cd yubico-authenticator-6.0.0-linux
5. ./desktop_integration.sh -i

You should now be able to lauch the application from your Application menu

To uninstall:
1. cd ~/yubico-authenticator-6.0.0-linux/
2. ./desktop_integration.s
3. rm ~/yubico-authenticator-6.0.0-linux/ --recursive

Alternatively, you can also use the yubikey-manager to obtain oath information.  To view the options:
1.  ykman --help

To obtain a list of oath codes:  ykman oath accounts code

Comment 11 Fedora Update System 2022-11-17 02:39:25 UTC
FEDORA-2022-ab89283605 has been pushed to the Fedora 37 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2022-ab89283605`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-ab89283605

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.

Comment 12 Fedora Update System 2022-11-18 11:42:04 UTC
FEDORA-2022-9837a114a9 has been submitted as an update to Fedora 38. https://bodhi.fedoraproject.org/updates/FEDORA-2022-9837a114a9

Comment 13 Fedora Update System 2022-11-18 11:42:30 UTC
FEDORA-2022-9837a114a9 has been pushed to the Fedora 38 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 14 Gerald Cox 2022-11-18 14:41:13 UTC
Reopening, not complete yet.

Comment 15 Fedora Update System 2022-11-25 02:38:42 UTC
FEDORA-2022-ab89283605 has been pushed to the Fedora 37 stable repository.
If problem still persists, please make note of it in this bug report.

Comment 16 Gerald Cox 2022-12-30 16:06:59 UTC
Reopening.  Package is currently in rawhide and will be introduced in F38.  

As mentioned in comment 10, the new yubioath-desktop package is now flutter based so it will 
not be included in the Fedora repository starting with F38 since:
1. flutter is not yet available in Fedora
2. required dependencies break packaging guidelines

I've created a front-end package for yubikey-manager (ykocli) that can be installed:
dnf install ykocli

It is TUI based and mimics the functionality provided by yubioath-desktop.  If that doesn't 
suit your needs, you can also easily install the new version of yubioath-desktop
directly from the yubico website following the instructions in comment 10.

Comment 17 Gerald Cox 2023-01-21 14:43:28 UTC
I've added an item here which explains the situation and provides mitigation:
https://discussion.fedoraproject.org/t/f38-yubioath-desktop-yubikey-manager-qt-will-no-longer-be-available-in-fedora-repository/45921

Comment 18 Ben Cotton 2023-02-07 15:10:55 UTC
This bug appears to have been reported against 'rawhide' during the Fedora Linux 38 development cycle.
Changing version to 38.

Comment 19 Gerald Cox 2023-04-21 09:31:02 UTC
*** Bug 2188544 has been marked as a duplicate of this bug. ***


Note You need to log in before you can comment on or make changes to this bug.