google
Support CTAP 2.1
The test tool currently supports commands from version 2.0. GetInfo informs about supported versions.
For old commands, tests should differentiate between authenticator versions. For new commands, tests should only run if an authenticator claims it is compatible.
Review draft 3 looks like it's going to closely resemble the final version. Also, I almost finished the implementation for OpenSK (see this issue). I'll start working on the test tool soon.
Hi there, the PS version has been published for a while. Is there any update about supporting CTAP 2.1? Thanks!
The CTAP code itself has worked in all my tests. We are working on a few other feature before we could do a release. If you want to test CTAP 2.1 support, feel free to try our develop branch and we welcome your feedback!
Thank you for the reply. Unfortunately, I don't see the develop branch.
Also, I noticed that there is an AuthenticatorCredentialManagementPositiveTest function in fido_commands.cc, but I cannot find an invocation to it. Should I add such tests in GetTests?
Thanks!
Oh nevermind my last comment, I was working on OpenSK before and didn't realize that this is my Test Tool.
We don't have tests for 2.1 here yet. If you want to add any, feel free to.
Hey @kaczmarczyck !
- I saw there are 10 or so CTAP 2.1 tests. Any plans on extending that?
- Do you plan to support CTAP 2.2? If so, do you have any rough time plan? I do not see any mentions of it on OpenSK project, which I understand would be required to proceed on this.
Hi! Support for newer Test Tool versions is on hold. We will look into testing for 2.1 or 2.2 when OpenSK releases its next version.
There is no timeline for that yet. I don't think the difference between 2.1 and 2.2 is as big as from 2.0 to 2.1, so I don't expect CTAP to be a major blocker. There are other open questions for a new OpenSK release though.