#992204 /usr/bin/yubikey-luks-open: Debian 11: Can't open device when passphrase is empty

#992204#5
Date:
2021-08-15 18:43:40 UTC
From:
To:
Hi,

After upgrading to Debian 11 both the keyscript or yubikey-luks-open fail to open a luks device.

Use of -v shows that the script gets no response from the key when sending an empty challenge (Yubikey response is empty).
Using ykchalresp via CLI work correctly.


Subsidiary info:
Both "CONCATENATE" and "HASH" are set to 0 in /etc/ykluks.cfg

Feel free to ask if more information is needed.

Regards,

Ash