WebAuthn icon indicating copy to clipboard operation
WebAuthn copied to clipboard

processCreate returning null for certificate fields

Open SeanHerbert opened this issue 5 years ago • 1 comments

$data = $WebAuthn->processCreate($clientDataJSON, $attestationObject, $challenge, $userVerification === 'required');

results in: $data->certificateChain equals NULL $data->certificate equal NULL $data->certificateIssuer equals "" $data->certificateSubject equals "" $data->signatureCounter equals NULL

I'm testing with windows hello. Any help would be much appreciated.

EDIT: I looked at \Format\None and it returns null for getCertificatePem, Which makes sense. But when using \Format\Packed, I can't figure out why my attestStmt->x5c is coming through as null.

SeanHerbert avatar Nov 04 '20 00:11 SeanHerbert

it's a bit of a surprise what you'll get from windows hello. If you get "none", there is no certificate. if you get "packed", it's normally self-signed, so there is no x5c certificate. If you get tpm, it's signed. I could receive tpm only on a newer device with the edge browser, with chrome and firefox I always got "none" 🤔. Microsoft dev guide: TPM attestation is a best effort. Only PCs with TPM 2.0 will return a TPM attestation statement, and the attestation process could fail for a variety of reasons.

lbuchs avatar Nov 04 '20 09:11 lbuchs