Unable to find middleware for YubiKey on MacOS

[mike-agrenius-kushner]

System: MacOS 10.14.4, YubiKey 4

Hi, I've been trying to evaluate my YubiKey on my Mac. The YubiKey firmware is installed, and I can use it end to end coupled with OpenSC. When I plug in the key, Fortify gives an error that /usr/local/lib/libykcs11.dylib does not exist (which it indeed does not), see screenshot.

While I suspect that this is due to Yubico making changes on their end, I thought I'd give you guys a heads up. Have also attached a log.

Cheers, Mike

fortify.log

[rmhrisk]

Do you use a different PKCS11 library for it than the above listed one?

How do you use this card normally?

Have you tried installing OpenSC?

[mike-agrenius-kushner]

Hi Ryan,

I use OpenSC's (see above) PKCS#11 lib, on my instance it's located at /Library/OpenSC/lib/opensc-pkcs11.so

Everything is using YubiKey's Manager and OpenSC's default MacOS installer, and I'm using the card to present an authentication certificate using FireFox, which works fine.

Cheers, Mike

[rmhrisk]

@microshine how do we specify multiple paths for a platform?

[microshine]

{
  "id": "993988460d8f49a2ac519a2935f11533",
  "name": "OpenSC driver",
  "file": {
    "osx": "/Library/OpenSC/lib/pkcs11/opensc-pkcs11.so",
    "linux": [
      "/usr/lib/opensc-pkcs11.so",
      "/usr/lib/x86_64-linux-gnu/opensc-pkcs11.so"
    ],
    "windows": "%WINDIR/System32/opensc-pkcs11.dll"
  }
}

[rmhrisk]

@kombatminipig will you try this config and see if it works?