WebAuthn::AttestationStatementVerificationError

[mastermarv]

When registering a YubiKey 5 NFC using FireFox on Windows 10 20H2, i recive a WebAuthn::AttestationStatementVerificationError
Using the key for logins on FireFox (after registering it with Chrome) works fine.

The problem occures only if all of the following conditions are met:

• key registartion
• firefox
• yubikey
• webauthn-ruby

FireFox / webauthn-ruby / YubiKey => AttestationStatementVerificationError
FireFox / webauthn-ruby / Win10 PlattformAuthenticator => OK
FireFox / webauthn.io / YubiKey => OK
Chrome / webauthn-ruby / YubiKey => OK

any idea how to debug that?

[oreoshake]

We have noticed a similar issue.

It appears to be first failing on this line:

webauthn-ruby/lib/webauthn/attestation_statement/packed.rb

Line 18 in 9544853

trustworthy?(aaguid: authenticator_data.aaguid) &&

Which then fails at

webauthn-ruby/lib/webauthn/attestation_statement/base.rb

Line 105 in 9544853

def valid_certificate_chain?(aaguid: nil, attestation_certificate_key_id: nil)

Which fails the verify call with “unable to get local issuer certificate”