freebsd stable - Sep 2018 - Yubico Security Keys

I just upgraded to 11.2-RELEASE with Firefox 60.0.1_1,1 from packages.
It's my understanding Yubico Security Keys should be supported (I
have one of the blue ones).? In Firefox I did about:config and set
security.webauth.u2f to true.? When I go to https://demo.yubico.com/u2f
to test it, the "Register a U2F device" fails with:


Registration failed!
Make sure you have a U2F device connected, and try again.
?Traceback (most recent call last):
? File "/root/python-u2flib-server-demo/examples/yubiauth_server.py",
line 161, in __call__
??? raise Exception("FIDO Client error: %s" % error)
Exception: FIDO Client error: 4 (DEVICE INELIGIBLE)


FreeBSD sees the device:

Sep? 4 17:25:13 freebsd kernel: ugen1.4: <Yubico Security Key by Yubico>
at usbus1
Sep? 4 17:25:13 freebsd kernel: uhid0 on uhub4
Sep? 4 17:25:13 freebsd kernel: uhid0: <Yubico Security Key by Yubico, class
0/0, rev 2.00/5.02, addr 4> on usbus1

So should this just work out of the box or is there something I'm
missing?

> On 5 Sep 2018, at 08:33, Robert Ames <robertames at hotmail.com>
wrote:
> FreeBSD sees the device:
> 
> Sep  4 17:25:13 freebsd kernel: ugen1.4: <Yubico Security Key by
Yubico> at usbus1
> Sep  4 17:25:13 freebsd kernel: uhid0 on uhub4
> Sep  4 17:25:13 freebsd kernel: uhid0: <Yubico Security Key by Yubico,
class 0/0, rev 2.00/5.02, addr 4> on usbus1
> 
> So should this just work out of the box or is there something I'm
> missing?
Hi Robert,
I don't have any Yubikeys but have you tried checking the permissions of
/dev/uhid0* and /dev/ugen1.4 (which will be a symlink to usb/1.4.0) ?
You can chmod them for now and then if that works have a devd conf or devfs rule
which sets the permissions appropriately when the device is connected.

If permissions are the problem it would be nice to see if the error message can
be improved too :)

--
Daniel O'Connor
"The nice thing about standards is that there
are so many of them to choose from."
 -- Andrew Tanenbaum