snapd

Snapd 2.62 brakes U2F in Firefox

Bug #2062148 reported by Gaëtan Blond
54
This bug affects 9 people
Affects Status Importance Assigned to Milestone
Mozilla Firefox
Confirmed
Unknown
snapd
New
Undecided
Unassigned

Bug Description

After upgrading Snapd to 2.62, my Yubikey stopped being recognized in Firefox. I investigated a litle bit, and found these logs in the journalctl when plugging and unplugging the USB device:

avril 18 10:45:41 <hostname> systemd-udevd[17984]: hidraw3: Process '/usr/lib/snapd/snap-device-helper snap_firefox_geckodriver' failed with exit code 1.
avril 18 10:45:47 <hostname> kernel: usb 1-2: new full-speed USB device number 8 using xhci_hcd
avril 18 10:45:48 <hostname> kernel: usb 1-2: New USB device found, idVendor=1050, idProduct=0407, bcdDevice= 5.43
avril 18 10:45:48 <hostname> kernel: usb 1-2: New USB device strings: Mfr=1, Product=2, SerialNumber=0
avril 18 10:45:48 <hostname> kernel: usb 1-2: Product: YubiKey OTP+FIDO+CCID
avril 18 10:45:48 <hostname> kernel: usb 1-2: Manufacturer: Yubico
avril 18 10:45:48 <hostname> kernel: input: Yubico YubiKey OTP+FIDO+CCID as /devices/pci0000:00/0000:00:08.1/0000:64:00.3/usb1/1-2/1-2:1.0/0003:1050:0407.0009/input/input25
avril 18 10:45:48 <hostname> kernel: hid-generic 0003:1050:0407.0009: input,hidraw2: USB HID v1.10 Keyboard [Yubico YubiKey OTP+FIDO+CCID] on usb-0000:64:00.3-2/input0
avril 18 10:45:48 <hostname> kernel: hid-generic 0003:1050:0407.000A: hiddev0,hidraw3: USB HID v1.10 Device [Yubico YubiKey OTP+FIDO+CCID] on usb-0000:64:00.3-2/input1
avril 18 10:45:48 <hostname> mtp-probe[17992]: checking bus 1, device 8: "/sys/devices/pci0000:00/0000:00:08.1/0000:64:00.3/usb1/1-2"
avril 18 10:45:48 <hostname> mtp-probe[17992]: bus: 1, device: 8 was not an MTP device
avril 18 10:45:48 <hostname> boltd[1301]: probing: started [1000]
avril 18 10:45:48 <hostname> systemd-udevd[17994]: hidraw3: Process '/usr/lib/snapd/snap-device-helper snap_firefox_firefox' failed with exit code 1.
avril 18 10:45:48 <hostname> systemd-udevd[17991]: hidraw2: Process '/usr/lib/snapd/snap-device-helper snap_firefox_firefox' failed with exit code 1.
avril 18 10:45:48 <hostname> systemd-udevd[17994]: hidraw3: Process '/usr/lib/snapd/snap-device-helper snap_firefox_geckodriver' failed with exit code 1.
avril 18 10:45:48 <hostname> systemd-udevd[17991]: hidraw2: Process '/usr/lib/snapd/snap-device-helper snap_firefox_geckodriver' failed with exit code 1.
avril 18 10:45:48 <hostname> mtp-probe[18014]: checking bus 1, device 8: "/sys/devices/pci0000:00/0000:00:08.1/0000:64:00.3/usb1/1-2"
avril 18 10:45:48 <hostname> mtp-probe[18014]: bus: 1, device: 8 was not an MTP device
avril 18 10:45:51 <hostname> boltd[1301]: probing: timeout, done: [2921608] (2000000)
avril 18 10:45:56 <hostname> kernel: usb 1-2: USB disconnect, device number 8
avril 18 10:45:57 <hostname> systemd-udevd[18025]: hidraw2: Process '/usr/lib/snapd/snap-device-helper snap_firefox_firefox' failed with exit code 1.
avril 18 10:45:57 <hostname> systemd-udevd[18025]: hidraw2: Process '/usr/lib/snapd/snap-device-helper snap_firefox_geckodriver' failed with exit code 1.
avril 18 10:45:57 <hostname> systemd-udevd[18033]: hidraw3: Process '/usr/lib/snapd/snap-device-helper snap_firefox_firefox' failed with exit code 1.
avril 18 10:45:57 <hostname> systemd-udevd[18033]: hidraw3: Process '/usr/lib/snapd/snap-device-helper snap_firefox_geckodriver' failed with exit code 1.

I don't know if it is related, but I also got some logs like this one just before:

avril 18 10:30:07 <hostname> systemd-udevd[930]: dm-2: Process '/usr/bin/unshare -m /usr/bin/snap auto-import --mount=/dev/dm-2' failed with exit code 1.

Reverting to 2.61.2 fixed the issues with U2F and all “exit code 1” in snapd logs.

OS is Kubuntu 22.04.4, kernel 6.5.0-27-generic, installed two weeks ago. Current installed snaps are:

Name Version Rev Tracking Publisher Notes
bare 1.0 5 latest/stable canonical✓ base
core22 20240111 1122 latest/stable canonical✓ base
firefox 125.0-1 4136 latest/stable/… mozilla✓ -
gnome-42-2204 0+git.510a601 176 latest/stable/… canonical✓ -
gtk-common-themes 0.1-81-g442e511 1535 latest/stable/… canonical✓ -
snapd 2.61.2 21184 latest/stable canonical✓ snapd

Revision history for this message
In , Dev+mozilla (dev+mozilla) wrote :

This is with Firefox 125.0 installed via Snap on Kubuntu Linux 23.10 with Kernel 6.5.0.

I'm using my YubiKey Neo as second factor via U2F for my accounts at Heroku, Google, GitHub, TYPO3 and Bitwaren. This is the device description my system logs when I insert my YubiKey:

Yubico YubiKey OTP+FIDO+CCID

A few days ago (possibly after a Firefox update, but I'm not completely sure, as I do all updates in a timely manner), using the YubiKey U2F for 2FA stopped working reliably anymore in Firefox: Most of the times, the website does not register when I touch the pad on the YubiKey, and sometimes it still does.

My private GPG key on the key is still working fine, and U2F on Chrome also continues to work reliably.

We have the same problem on a different computer (also Kubuntu 23.10, also on Firefox) with a different YubiKey on different accounts.

Revision history for this message
In , Evilpies (evilpies) wrote :

Can you please try a regular (non-snap) Firefox build?

Revision history for this message
In , Dev+mozilla (dev+mozilla) wrote :

I've just tested with Firefox 125.0.1 downloaded as tgz: In this non-Snap version, the problem does indeed not occur (anymore).

Very strangely, now with the Snap version of Firefox, the problem doesn't occur anymore.

Revision history for this message
In , Dev+mozilla (dev+mozilla) wrote :

Are there any logs that would be helpful to send (syslog? Firefox console?) to help track this down?

Revision history for this message
Maxime BLANCHON (maxime-bc) wrote :
Download full text (4.7 KiB)

Hello,

I am facing a similar issue with a YubiKey 5C.

If you insert the Yubikey when prompted by the browser and then touch it, the login will fail. This was working with snapd 2.61.2. The Yubikey must be plugged-in before launching the browser otherwise the login will fail.

From my testing, this happen only with snapd 2.62 with browsers installed via snap (tested with Firefox and Chromium). Reverting to 2.61.2 fixes this issue.

Here are my logs:

Apr 22 10:33:06 ubuntu kernel: usb 1-2: new full-speed USB device number 8 using ohci-pci
Apr 22 10:33:07 ubuntu kernel: usb 1-2: New USB device found, idVendor=1050, idProduct=0407, bcdDevice= 5.27
Apr 22 10:33:07 ubuntu kernel: usb 1-2: New USB device strings: Mfr=1, Product=2, SerialNumber=0
Apr 22 10:33:07 ubuntu kernel: usb 1-2: Product: YubiKey OTP+FIDO+CCID
Apr 22 10:33:07 ubuntu kernel: usb 1-2: Manufacturer: Yubico
Apr 22 10:33:07 ubuntu kernel: input: Yubico YubiKey OTP+FIDO+CCID as /devices/pci0000:00/0000:00:06.0/usb1/1-2/1-2:1.0/0003:1050:0407.000C/input/input13
Apr 22 10:33:07 ubuntu kernel: hid-generic 0003:1050:0407.000C: input,hidraw1: USB HID v1.10 Keyboard [Yubico YubiKey OTP+FIDO+CCID] on usb-0000:00:06.0-2/input0
Apr 22 10:33:07 ubuntu kernel: hid-generic 0003:1050:0407.000D: hiddev0,hidraw2: USB HID v1.10 Device [Yubico YubiKey OTP+FIDO+CCID] on usb-0000:00:06.0-2/input1
Apr 22 10:33:07 ubuntu mtp-probe[14219]: checking bus 1, device 8: "/sys/devices/pci0000:00/0000:00:06.0/usb1/1-2"
Apr 22 10:33:07 ubuntu mtp-probe[14219]: bus: 1, device: 8 was not an MTP device
Apr 22 10:33:07 ubuntu (udev-worker)[14217]: 1-2: Process '/usr/lib/snapd/snap-device-helper snap_cups_cupsd' failed with exit code 1.
Apr 22 10:33:07 ubuntu (udev-worker)[14217]: 1-2: Process '/usr/lib/snapd/snap-device-helper snap_cups_ippeveprinter' failed with exit code 1.
Apr 22 10:33:07 ubuntu systemd[1]: Reached target smartcard.target - Smart Card.
Apr 22 10:33:07 ubuntu systemd[1136]: Reached target smartcard.target - Smart Card.
Apr 22 10:33:07 ubuntu (udev-worker)[14217]: 1-2:1.0: Process '/usr/lib/snapd/snap-device-helper snap_cups_cupsd' failed with exit code 1.
Apr 22 10:33:07 ubuntu (udev-worker)[14218]: 1-2:1.1: Process '/usr/lib/snapd/snap-device-helper snap_cups_cupsd' failed with exit code 1.
Apr 22 10:33:07 ubuntu (udev-worker)[14217]: 1-2:1.0: Process '/usr/lib/snapd/snap-device-helper snap_cups_ippeveprinter' failed with exit code 1.
Apr 22 10:33:07 ubuntu (udev-worker)[14224]: 1-2:1.2: Process '/usr/lib/snapd/snap-device-helper snap_cups_cupsd' failed with exit code 1.
Apr 22 10:33:07 ubuntu (udev-worker)[14224]: 1-2:1.2: Process '/usr/lib/snapd/snap-device-helper snap_cups_ippeveprinter' failed with exit code 1.
Apr 22 10:33:07 ubuntu (udev-worker)[14218]: 1-2:1.1: Process '/usr/lib/snapd/snap-device-helper snap_cups_ippeveprinter' failed with exit code 1.
Apr 22 10:33:07 ubuntu (udev-worker)[14218]: hidraw2: Process '/usr/lib/snapd/snap-device-helper snap_firefox_firefox' failed with exit code 1.
Apr 22 10:33:07 ubuntu (udev-worker)[14234]: hidraw1: Process '/usr/lib/snapd/snap-device-helper snap_firefox_firefox' failed with exit code 1.
Apr 22 10:33:07 ubuntu (udev-worker)[14218]: hidraw2:...

Read more...

Revision history for this message
In , Stefaan-lippens-4 (stefaan-lippens-4) wrote :

I'm having the same issue with:
- Firefox 124.0.2, Snap on Ubuntu 22.04.4 LTS
- Yubikey 5C NFC

Using my yubikey worked reliable for months (mainly for GitHub login), but since somewhere last week it stopped working.

It still works in Chromium (124.0.6367.60, snap)

Revision history for this message
In , Jschanck (jschanck) wrote :

*** Bug 1892476 has been marked as a duplicate of this bug. ***

Revision history for this message
In , Lissyx+mozillians (lissyx+mozillians) wrote :

While not yet merged, it is possible to run `mozregression` on Snap builds, https://github.com/lissyx/mozregression/tree/tc-snap-upstream

Revision history for this message
In , Lissyx+mozillians (lissyx+mozillians) wrote :

(and I just tested, my Firefox 125 on Snap works well with yubikey, tested on https://webauthn.io on 23.10)

Amin, is there something on 22.04 which might be regressed and not on newer versions?

Revision history for this message
In , Lissyx+mozillians (lissyx+mozillians) wrote :
Download full text (4.2 KiB)

```
$ snap info firefox
name: firefox
summary: Mozilla Firefox web browser
publisher: Mozilla✓
store-url: https://snapcraft.io/firefox
contact: https://support.mozilla.org/kb/file-bug-report-or-feature-request-mozilla
license: unset
description: |
  Firefox is a powerful, extensible web browser with support for modern web application
  technologies.
commands:
  - firefox
  - firefox.geckodriver
snap-id: 3wdHCAVyZEmYsCMFDE9qt92UV8rC8Wdk
tracking: latest/stable
refresh-date: Il y a 4 jours, à 13 h 21 HNR
channels:
  latest/stable: 125.0.2-1 2024-04-22 (4173) 282MB -
  latest/candidate: 125.0.2-1 2024-04-19 (4173) 282MB -
  latest/beta: 126.0b3-1 2024-04-19 (4170) 285MB -
  latest/edge: 127.0a1 2024-04-22 (4179) 303MB -
  esr/stable: 115.10.0esr-1 2024-04-16 (4126) 256MB -
  esr/candidate: 115.10.0esr-1 2024-04-11 (4126) 256MB -
  esr/beta: ↑
  esr/edge: ↑
installed: 125.0-1 (4136) 282MB -
$ snap connections firefox
Interface Connecteur Prise Notes
alsa firefox:alsa - -
audio-playback firefox:audio-playback :audio-playback -
audio-record firefox:audio-record :audio-record -
avahi-observe firefox:avahi-observe :avahi-observe -
browser-support firefox:browser-sandbox :browser-support -
camera firefox:camera :camera -
content[gnome-42-2204] firefox:gnome-42-2204 gnome-42-2204:gnome-42-2204 -
content[gtk-3-themes] firefox:gtk-3-themes gtk-common-themes:gtk-3-themes -
content[icon-themes] firefox:icon-themes gtk-common-themes:icon-themes -
content[sound-themes] firefox:sound-themes gtk-common-themes:sound-themes -
cups-control firefox:cups-control :cups-control -
dbus - firefox:dbus-daemon -
desktop firefox:desktop :desktop -
desktop-legacy firefox:desktop-legacy :desktop-legacy -
gsettings firefox:gsettings :gsettings -
hardware-observe firefox:hardware-observe :hardware-observe -
home firefox:home :home -
joystick firefox:joystick :joystick -
mount-control firefox:host-hunspell :mount-control -
mpris - firefox:mpris -
network firefox:network :network -
network-bind firefox:network-bind :network-bind -
network-observe ...

Read more...

Revision history for this message
Mike (strayobject) wrote :
Download full text (3.4 KiB)

I came to report this only to find someone else already has :) I will add myself to this.

Snap(d) 2.62 Ubuntu 22.04 kernel 5.19.0.35-generic

This affects all browsers installed via snap. Non-snap installations work fine.

syslog entries are similar to the above folk:

1-3.1: Process '/usr/lib/snapd/snap-device-helper snap_cups_cupsd' failed with exit code 1.
Apr 23 23:33:39 mike-pc systemd-udevd[199982]: 1-3.1: Process '/usr/lib/snapd/snap-device-helper snap_cups_ippeveprinter' failed with exit code 1.
Apr 23 23:33:39 mike-pc systemd-udevd[199982]: 1-3.1:1.0: Process '/usr/lib/snapd/snap-device-helper snap_cups_cupsd' failed with exit code 1.
Apr 23 23:33:39 mike-pc systemd-udevd[199982]: 1-3.1:1.0: Process '/usr/lib/snapd/snap-device-helper snap_cups_ippeveprinter' failed with exit code 1.
Apr 23 23:33:39 mike-pc systemd-udevd[199998]: 1-3.1:1.1: Process '/usr/lib/snapd/snap-device-helper snap_cups_cupsd' failed with exit code 1.
Apr 23 23:33:39 mike-pc systemd-udevd[199999]: 1-3.1:1.2: Process '/usr/lib/snapd/snap-device-helper snap_cups_cupsd' failed with exit code 1.
Apr 23 23:33:39 mike-pc systemd-udevd[199998]: 1-3.1:1.1: Process '/usr/lib/snapd/snap-device-helper snap_cups_ippeveprinter' failed with exit code 1.
Apr 23 23:33:39 mike-pc systemd-udevd[199999]: 1-3.1:1.2: Process '/usr/lib/snapd/snap-device-helper snap_cups_ippeveprinter' failed with exit code 1.
Apr 23 23:33:39 mike-pc systemd-udevd[200009]: hiddev1: Process '/usr/lib/snapd/snap-device-helper snap_cups_cupsd' failed with exit code 1.
Apr 23 23:33:39 mike-pc systemd-udevd[199982]: hidraw8: Process '/usr/lib/snapd/snap-device-helper snap_brave_brave' failed with exit code 1.
Apr 23 23:33:39 mike-pc systemd-udevd[200009]: hiddev1: Process '/usr/lib/snapd/snap-device-helper snap_cups_ippeveprinter' failed with exit code 1.
Apr 23 23:33:39 mike-pc systemd-udevd[199982]: hidraw8: Process '/usr/lib/snapd/snap-device-helper snap_chromium_chromedriver' failed with exit code 1.
Apr 23 23:33:39 mike-pc systemd-udevd[199982]: hidraw8: Process '/usr/lib/snapd/snap-device-helper snap_chromium_chromium' failed with exit code 1.
Apr 23 23:33:39 mike-pc systemd-udevd[199998]: hidraw9: Process '/usr/lib/snapd/snap-device-helper snap_brave_brave' failed with exit code 1.
Apr 23 23:33:39 mike-pc systemd-udevd[199982]: hidraw8: Process '/usr/lib/snapd/snap-device-helper snap_firefox_firefox' failed with exit code 1.
Apr 23 23:33:39 mike-pc systemd-udevd[199998]: hidraw9: Process '/usr/lib/snapd/snap-device-helper snap_chromium_chromedriver' failed with exit code 1.
Apr 23 23:33:39 mike-pc systemd-udevd[199982]: hidraw8: Process '/usr/lib/snapd/snap-device-helper snap_firefox_geckodriver' failed with exit code 1.
Apr 23 23:33:39 mike-pc systemd-udevd[199998]: hidraw9: Process '/usr/lib/snapd/snap-device-helper snap_chromium_chromium' failed with exit code 1.
Apr 23 23:33:39 mike-pc systemd-udevd[199998]: hidraw9: Process '/usr/lib/snapd/snap-device-helper snap_firefox_firefox' failed with exit code 1.
Apr 23 23:33:39 mike-pc systemd-udevd[199998]: hidraw9: Process '/usr/lib/snapd/snap-device-helper snap_firefox_geckodriver' failed with exit code 1.
Apr 23 23:33:39 mike-pc systemd-udevd[2000...

Read more...

Revision history for this message
Gaëtan Blond (gaetan-blond) wrote :

It might get fixed in 2.63: https://github.com/snapcore/snapd/pull/13882

Revision history for this message
In , Lissyx+mozillians (lissyx+mozillians) wrote :

(In reply to stefaan.lippens from comment #4)
> I'm having the same issue with:
> - Firefox 124.0.2, Snap on Ubuntu 22.04.4 LTS
> - Yubikey 5C NFC
>
> Using my yubikey worked reliable for months (mainly for GitHub login), but since somewhere last week it stopped working.
>
> It still works in Chromium (124.0.6367.60, snap)

Can you check `snap connections firefox` and especially if you have:
> u2f-devices firefox:u2f-devices :u2f-devices -

I think this is used for any of those keys

Revision history for this message
In , Lissyx+mozillians (lissyx+mozillians) wrote :

Created attachment 9398644
Capture d’écran du 2024-04-25 15-37-51.png

This is where I'm stuck on when I disconnect the `u2f-device` plug of snap:
```
$ snap connections firefox
[...]
u2f-devices firefox:u2f-devices - -
[...]
```

Revision history for this message
In , Lissyx+mozillians (lissyx+mozillians) wrote :

Ok so now it is not working anymore for me as well, even after reconnecting

Revision history for this message
In , Lissyx+mozillians (lissyx+mozillians) wrote :

Unfortunately, I cannot use `mozregression` because:
 - `snap connect` from `mozregression` hit https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/2043993
 - not doing `snap refresh` we have non working u2f interface at all
 - doing `snap refresh` updates us to latest version ...

Revision history for this message
In , Lissyx+mozillians (lissyx+mozillians) wrote :

I manually went back to version 122 and it was still no working, so based on comment 7 and comment 2, I suspect it's more likely to be a snapd / integration issue below firefox and unrelated with us?

Revision history for this message
In , Lissyx+mozillians (lissyx+mozillians) wrote :

So if I start `snap run firefox` with the key plugged in, then it works

Revision history for this message
In , Amin Bandali (bandali) wrote :

I'm not aware of any related regressions on 22.04. Sadly I can't do any testing for this at the moment because I don't have any U2F devices, but I will look into acquiring one and see if I can reproduce the issue and/or find out anything more.

I wonder if Firefox's Browser Console (Ctrl+Shift+J) might show any relevant error messages? Also, since the issue occurs with the Firefox snap, I'd recommend looking over https://snapcraft.io/docs/debug-snaps for some general tips for debugging snap packages for issues like apparmor policy violations, etc., and gathering and providing more logs that may help diagnose the issue.

Revision history for this message
In , Lissyx+mozillians (lissyx+mozillians) wrote :

(In reply to Oliver Klee from comment #3)
> Are there any logs that would be helpful to send (syslog? Firefox console?) to help track this down?

I can't find any, but maybe :jschanck knows?

Revision history for this message
In , Lissyx+mozillians (lissyx+mozillians) wrote :

When plugging the yubikey AFTER running `snap run firefox`:
 - nothing in `sudo snappy-debug`
 - `about:webauthn` shows no info
 - browser console or tab console does not show any error

Revision history for this message
In , Lissyx+mozillians (lissyx+mozillians) wrote :

i'm reproducing the same behavior on 23.10 with the `yubioath-desktop` snap:
 - `snap run yubioath-desktop` without the yubikey plugged: not detected
 - plug the yubikey then `snap run yubioath-desktop`: detected

Revision history for this message
In , Jschanck (jschanck) wrote :

You could try setting `MOZ_LOG=authenticator::*:5`.

Revision history for this message
In , PeterJCLaw (peterjclaw) wrote :

Cross linking -- there appears to be some discussion at https://bugs.launchpad.net/snapd/+bug/2062148, which appears to indicate a potential fix is coming in the next snapd.

Revision history for this message
Oliver Klee (launchpad-oliverklee) wrote :

Cross-linking: This is the corresponding ticket on the Mozilla bug tracker: https://bugzilla.mozilla.org/show_bug.cgi?id=1892628

Bug Watch Updater (bug-watch-updater)
Changed in firefox:
status: Unknown → Confirmed
Revision history for this message
Edgar Bonet (linu7) wrote :

I am having the same issue with:
  - Ubuntu 22.04.4 LTS
  - kernel 6.5.0-28-generic
  - snapd 2.61.3+22.04
  - Firefox 125.0.2 (snap-id: 3wdHCAVyZEmYsCMFDE9qt92UV8rC8Wdk)
  - Nitrokey FIDO2 2.4.1 (idVendor=20a0, idProduct=42b1, bcdDevice= 1.00)

`snap connections firefox` does show the line "u2f-devices".

Plugging the key before starting Firefox did solve the issue.

Revision history for this message
In , jwm (jwm-angrymonkey) wrote :

I'm seeing the same problem using the "firefox-next" beta build *without snap* since at least 125, on Ubuntu 23.10, eg:

```
❯ apt-cache policy firefox
firefox:
  Installed: 126.0~b9+build1-0ubuntu0.23.10.1
  Candidate: 126.0~b9+build1-0ubuntu0.23.10.1
  Version table:
       1:1snap1-0ubuntu3 -10
           500 http://nz.archive.ubuntu.com/ubuntu mantic/main amd64 Packages
*** 126.0~b9+build1-0ubuntu0.23.10.1 1001
           1001 https://ppa.launchpadcontent.net/mozillateam/firefox-next/ubuntu mantic/main amd64 Packages
             100 /var/lib/dpkg/status
```
The site will ask for the button on the hardware token to be pressed, but it never lights up. In my case, this is true of three different Yubikeys, which otherwise work with Yubico Authenticator, and did work in the browser a few versions back.

A glance at `/etc/apt/history.log*` indicates that I hopped from 122.0~b9+build1-0ubuntu0.23.10.1 to 125.0~b6+build1-0ubuntu0.23.10.1, and it was running 125 where I first observed the problem, today (2024-05-04). Upgrading to 126 has not helped, sadly.

Hopefully that's enough to bisect the u2f code.

Revision history for this message
In , D-dan-2 (d-dan-2) wrote :

Hello, I have noticed this today, wanted to provide a few things that may help. _This is using the snap release_.

I am on Firefox 125.0 on Ubuntu 22.04.02. I started noticing the issue today, where I was suddenly unable to log into Slack or anything that required my Yubikey.

1. My yubikey will flash, and Firefox will prompt for a Yubikey, but nothing will happen when I touch that Yubikey.
2. If I open Firefox in safe mode, Yubikeys will begin to work for both the safe mode browser _and the Firefox instance that was already open_. I have no extensions that would cause issues with the Yubikey (Indie Wiki Buddy and Reddit Enhancement Suite, neither of which are active when this presents).
3. This only occurs when attempting to use FIDO2 auth. I have a PIN on my Yubikey for FIDO. The yubikey will work _just fine_ when attempting to auth into Github using it as a passkey, but attempting to log into it into a website that uses it with FIDO2 (and needs a PIN prompt) fails.

Revision history for this message
Maciej Borzecki (maciek-borzecki) wrote :

I think this issue may be resolved by https://github.com/snapcore/snapd/pull/13882 which was cherry picked to 2.63 snapd which is currently in beta. Can you refresh snapd from the beta channel by running: `snap refresh --beta snapd` and try again?

Revision history for this message
In , Amin Bandali (bandali) wrote :

Okay I got my hands on a Yubikey and tested with it, and was able to reproduce the issue.

As hinted at by the two "See Also" links added by gerard-majax, this appears to be a snapd 2.62 regression, and should be fixed in the upcoming snapd 2.63 release. If you'd like to switch to that and test it right now, you can run `sudo snap refresh --beta snapd`, and later when 2.63 is released to stable run `sudo snap refresh --stable snapd` to switch back to stable. If that's not an option for you, plugging in the Yubikey *before* launching the Firefox snap seems to work reliably as a temporary workaround.

Revision history for this message
In , Release-mgmt-account-bot (release-mgmt-account-bot) wrote :

The severity field is not set for this bug.
:gerard-majax, could you have a look please?

For more information, please visit [BugBot documentation](https://wiki.mozilla.org/BugBot#workflow.2Fno_severity.py).

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.