Hello there,

We are trying to enable FIDO2 WebAuthN support in CAS with both Yubikeys 
and using the built-in browser support for FIDO2, namely for Safari on Mac 
OS.

While Yubikey registration and authentication works fine out of the box, 
when trying to register a FIDO2 device using the native Safari support for 
FIDO2 (without a Yubikey), we are presented with the following error on the 
registration step :

"java.lang.IllegalArgumentException: Failed to obtain attestation trust 
anchors."

Any ideas why this is happening and maybe how we can configure our own 
attestation trust anchors to include other sources than Yubikeys ?

Thanks,
George

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/72d469d8-ab70-49c0-9cc2-269bd38af313n%40apereo.org.

Reply via email to