RFE: ykman objects import from stdin issues

[opoplawski]

There are two issues with running ykman piv objects import 0x5FC10C -:

• It does not prompt for PIN
• It treats the input as UTF-8 in UTF-8 locales, so you can get: Error: 'utf-8' codec can't decode byte 0xc1 in position 0: invalid start byte

[dainnilsson]

I'm not able to reproduce this using ykman 5.7.2 on Ubuntu 24.04:

PIN is prompted for instead of Management key in case you have your YubiKey configured in "PIN protected" mode. Otherwise the management key is prompted for.

The data to store is read in binary mode. I am using cat file.bin | ykman ... - to test this.

Do note that if you do not supply the management key (or PIN in case of "PIN protected") the tool will initially prompt you for it. As this value is provided as a text string, it will be read as UTF-8, which is correct. The DATA will then be read in binary.

[opoplawski]

I was using the older instructions:

echo C10114C20100FE00 | xxd -r -p | ykman piv objects import 0x5FC10C -

Which has been updated to write to a file. But I did end up having to use:

ykman piv objects import 0x5fc10c keyhistory.bin

This was on Fedora.