[QUESTION] PAM Konfig Proxy and https

2016-04-21T09:16:40+01:00

pam-yubico.so uses curl in the background for resolving authentication from yubico Server

1. Behind Firewall I have to Configure Proxy Server
- proxy=http://:
this works only with newer Versions auf pam-yubico v2.21 ( see source/NEWS / for me OK )

2. If no url= or urllist= parameters are specified, pam-yubico uses https (SSL) to connect
- Certificate of api.yubico.com is selfsigned, curl is unable to find a chain, so connect is denied and authentication failed

- How can I make curl been invoked with option --unsecure
- or where I can get an proper cacerts File from
- or other way to setup pam-yubico without url= or urllist= Parameters ( because URL may change, at this Moment it is api1 - api5. which shall i Use ? dosn't matter ? )
- where can I get the urllist from ( ykclient_set_url_bases I don't understand. Its a Programm ? Function Call ? )

at this Moment this works for me

auth required pam_yubico.so id=****** proxy=http://x.x.x.x:8080 url=http://api5.yubico.com/wsapi/2.0/verify?id=%d&otp=%s

Statistics: Posted by asshep — Thu Apr 21, 2016 9:16 am

Yubico Forum

[QUESTION] PAM Konfig Proxy and https