Looking for rPKI ROA signing service that works with my YubiKey from 2012

Networking by wilmaethqn44 2y ago 2 replies 118 views

wilmaethqn44

Member OP

Joined:: Jun 2024
Posts:: 135
From:: Cardiff, UK

2y ago

2 #1

Sorry for the silly question but I have this old yubikey from a conference I went to years ago and I want to use it for RPKI ROA signing. I tried the web interface for my RIR but it says browser not supported. Is there a service that works with old yubikeys?? I dont want to buy new one if I can help it. I run small hosting for my clients and want to add RPKI for security. Worried about breaking BGP if I do it wrong

Thank you for any help

frames, tables, still valid HTML

SingaporeRep

Member

Benchmark Addict

Joined:: Jul 2024
Posts:: 227
From:: Singapore, SG

2y ago · edited

Yubikey-info:
  version: 2.2
  otp: yes
  u2f: no
  fido2: no
  pgp: 2048-bit RSA

Decent hardware, meh crypto. Your problem is PIV not FIDO2. Try this:
- rpkiclient with pkcs11 module
- opensc for yubikey PIV
- sign locally, upload ROA via API

No web ui needed. Numbers dont care about your browser.

fio, iperf, geekbench. results or gtfo.

beto60

Member

Joined:: Jun 2024
Posts:: 95
From:: Curitiba, Brazil

2y ago

Nossa! I am not use yubikey for RPKI nossa! But I am use old hardware all the time caramba! There is no shame in this kkkk maybe you can use command line tool and not browser?? Double negation: I am not saying dont use browser, but maybe dont use browser!! Warm regards from brazil!!

Post a reply

You need an account to reply. Log in or register to join the conversation.

Post reply Preview Save draft