Issues with Git plugin and YubiKey

Oxygen general issues.
Simcha
Posts: 16
Joined: Wed Feb 26, 2020 5:47 pm

Issues with Git plugin and YubiKey

Post by Simcha »

I have had a YubiKey for quite a while now, but I have just started getting errors with the latest Git plugin (happens with both Developer 26.1 and 27) when trying to access the repository. I am not sure if something changed on the system side or with the plugin, but I am getting the following message:

Unreachable repository, {github repository name}: [ssh-connection]: Failed (IOException) to execute: HostConfig for host {repository URL}: could not instantiate PKCS11Provider C:\Program Files\Yubico\YubicoPIV Tool\bin\libykcs11.dll

I tried resetting the connection and it asks for my ssh password, which I entered, but getting the same errors.

I can get to the repository via the git command.

Any ideas as to what is happening and what could be done to resolve it?
sorin_carbunaru
Posts: 417
Joined: Mon May 09, 2016 9:37 am

Re: Issues with Git plugin and YubiKey

Post by sorin_carbunaru »

Hi,

First of all, it's a pleasent surprise for us to find out the Git Client add-on worked with YubiKey. We don't officially support that, as we didn't have many clients interested in it and we didn't get a YubiKey to test it. But I guess that JGit, the Java library we use for Git operations, is able to work with authentication devices and we don't have to do anything special in our code.

That being said, in the latest version of the Git Client add-on we updated the version of JGit we use to 7.0.0. I suspect this might have something to do with the fact that your authentication does not work anymore. Therefore, please drop an e-mail to support@oxygenxml.com and mention this forum thread, so I can give you an internal build that you could try. This build uses the version of JGit from Git Client 5.3.0 and I'd like to see if that version works with you. If it does, perhaps you should contact the team from Eclipse JGit and let them know about the problem with 7.0.0... But before that, you could (and actually should) also try using Git with YubiKey in Eclipse with the latest EGit client, which is also built on top of JGit. I expect EGit 7.0.0 to be using JGit 7.0.0... Or perhaps try using the JGit CLI, but this is not that easy to set-up (https://wiki.eclipse.org/JGit/User_Guid ... ng_Started).

All the best,
Sorin Carbunaru
Oxygen XML Editor
Simcha
Posts: 16
Joined: Wed Feb 26, 2020 5:47 pm

Re: Issues with Git plugin and YubiKey

Post by Simcha »

Thanks Sorin, I've sent an email. It's possible that something else has changed on our side of the equation, as I am fairly sure that previously I had only had to supply the ssh passcode for the plugin to work. I'll try the new plugin when I get it, but I'm also checking with our support folks to see if any updates have been done with the YubiKey here.
Simcha
Posts: 16
Joined: Wed Feb 26, 2020 5:47 pm

Re: Issues with Git plugin and YubiKey

Post by Simcha »

I resolved the issue by removing my old ssh key and creating a new Yubikey-free one. Still no idea what happened to cause the issue, but I'm back to being able to use the plug-in. Guess I should remove the replacement plugin with 5.3.0 and go back to the newer one.
Post Reply