This should presumably work on Mac as well, but as of this release this is untested. Put both KeeChallenge.dll and in the KeePass2 folder (on Ubuntu this is /usr/lib/keepass2). Make sure all of the yubico libraries are installed where mono can find them (for example, /usr/lib on Linux or the KeePass2 folder). For this to work, you must also obtain the appropriate versions of the Yubico libraries. To run under Linux using mono, you must modify and add a dllmap entry to let Mono know where to find the native libraries. Platforms: Windows, Linux via Mono, Mac (untested)Īs of v1.0.1 both Windows and Linux (Ubuntu) have been tested successfully. The challenge is stored in plain text in the xml file while the expected response is used to generate the encryption key. The plugin works by pre-computing the next challenge response pair. If the file is lost or corrupted, a recovery mode allows the user to enter their secret manually to unlock the database. The secret is itself encrypted using AES-256 and stored in a separate xml file. The mutual secret is used as the encryption key.
To address this, I created the KeeChallenge plugin for Keepass2 which implements HMAC-SHA1 challenge-response authentication to create a composite Keepass key. No change.One frustrating limitation of the OTP protocol is that it is not possible to use multiple yubikeys to unlock the same Keepass database. I upgraded to 2.45, which is the newest available in the PPA I have. I've tried copying the key to the Ubuntu systems to rule out network or mount issues, but the problem persists.
The same key works on Windows and Android. It gives me an "Invalid composite key" error. Both Ubuntu systems are running Ubuntu 20.04.Īs of about a week ago I can't open the database from either Ubuntu machine. On the two Ubuntu systems I regularly use, one is a VM that accesses the key via a 9p mount. On Android, I have to copy the key to the phone. On Windows it is accessed via a mapped drive. I use WebDAV to store the database and access it from Windows, Ubuntu, and Android. I've been using the same stack to access my KeePass from multiple devices for about five years.
0 kommentar(er)
