Yubico Forum

Re: .NET validation server?

2008-09-09T02:11:49+01:00

Finally we have it available. For the latest details of the free .NET released library, see the bottom of the page:

http://www.collectivesoftware.com/Products/AuthLite

Statistics: Posted by ferrix — Tue Sep 09, 2008 2:11 am

Re: .NET validation server?

2008-09-05T07:47:37+01:00

Hello Everyone,
My company has developed a tool for validating the Yubikey OTP utilizing the .Net Framework for validation server. We have it available in .Net 2.0 framework, we will have in .Net 3.5 based upon your request . If you are interested, please visit our website to view a product demo and download an evaluation version at http://www.yubikeydotnet.com.

Thanks,

Statistics: Posted by coolzero — Fri Sep 05, 2008 7:47 am

Re: .NET validation server?

2008-08-28T22:18:30+01:00

hongzhang wrote:

It seems the java validation server I downloaded has only class files, not source code?

The source code is there:

http://code.google.com/p/yubikey-server ... bico/wsapi

And more documentation here:

yubico-val-server/

Cheers

Statistics: Posted by paul — Thu Aug 28, 2008 10:18 pm

Re: .NET validation server?

2008-08-28T22:15:44+01:00

hongzhang wrote:

Hi,

2) If no, I can probably write it myself. I just want to make sure my understanding is correct, the authorization server basically only stores the Identifier (key ID), Session, and TimeStamp, if the input token is valid, I simply make sure (from the table) the key is not a replay. Is it? Anything else I am missing? If yes, does that mean I should probably only need one table in the database, correct?

Basically, decrypt the OTP by the AES key corresponding to this Yubikey, then extract and data including TokenId, Counter, TimeStamp and check on them.

See the code working under api.yubico.com here:

http://code.google.com/p/yubikey-server ... ystem.java

Cheers

Statistics: Posted by paul — Thu Aug 28, 2008 10:15 pm

Re: .NET validation server?

2008-08-28T16:43:22+01:00

We have ported the "basic validation server" to .net and can release it to the community. I will post a link here.

Statistics: Posted by ferrix — Thu Aug 28, 2008 4:43 pm

Re: .NET validation server?

2008-08-28T14:02:33+01:00

Hi, thanks for your reply. Could you confirm if my understanding (question 2) is correct?

It seems the java validation server I downloaded has only class files, not source code?

Statistics: Posted by hongzhang — Thu Aug 28, 2008 2:02 pm

Re: .NET validation server?

2008-08-28T00:06:32+01:00

Hi, Hongzhang,

Yes some of our customers are asking for it.

viewtopic.php?f=12&t=173

That's a high-priority project in the community's wish list, how long do you this can be done? Since it has been ported to PHP, Perl:

http://yubico.com/developers/library/

I suppose it should be easily doable by an experience developer. And do you expect to share with the community and get a lot of feedback & QA help? Or you plan to polish it on your own and license it to customers?

Let me know how we can help. Thanks

Statistics: Posted by paul — Thu Aug 28, 2008 12:06 am

.NET validation server?

2008-08-27T19:29:29+01:00

Hi,

I am having two questions about the validation server:

1) Does anyone know any open source .NET authorization server?

2) If no, I can probably write it myself. I just want to make sure my understanding is correct, the authorization server basically only stores the Identifier (key ID), Session, and TimeStamp, if the input token is valid, I simply make sure (from the table) the key is not a replay. Is it? Anything else I am missing? If yes, does that mean I should probably only need one table in the database, correct?

Thanks in advanced.

Statistics: Posted by hongzhang — Wed Aug 27, 2008 7:29 pm