Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

processCreate returning null for certificate fields #26

Open
SeanHerbert opened this issue Nov 4, 2020 · 1 comment
Open

processCreate returning null for certificate fields #26

SeanHerbert opened this issue Nov 4, 2020 · 1 comment
Labels
question Further information is requested

Comments

@SeanHerbert
Copy link

SeanHerbert commented Nov 4, 2020

$data = $WebAuthn->processCreate($clientDataJSON, $attestationObject, $challenge, $userVerification === 'required');

results in:
$data->certificateChain equals NULL
$data->certificate equal NULL
$data->certificateIssuer equals ""
$data->certificateSubject equals ""
$data->signatureCounter equals NULL

I'm testing with windows hello.
Any help would be much appreciated.

EDIT: I looked at \Format\None and it returns null for getCertificatePem, Which makes sense. But when using \Format\Packed, I can't figure out why my attestStmt->x5c is coming through as null.

@lbuchs
Copy link
Owner

lbuchs commented Nov 4, 2020

it's a bit of a surprise what you'll get from windows hello. If you get "none", there is no certificate.
if you get "packed", it's normally self-signed, so there is no x5c certificate. If you get tpm, it's signed. I could receive tpm only on a newer device with the edge browser, with chrome and firefox I always got "none" 🤔. Microsoft dev guide: TPM attestation is a best effort. Only PCs with TPM 2.0 will return a TPM attestation statement, and the attestation process could fail for a variety of reasons.

@lbuchs lbuchs added the question Further information is requested label Nov 15, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
question Further information is requested
Projects
None yet
Development

No branches or pull requests

2 participants