pam-yubico.so uses curl in the background for resolving authentication from yubico Server
1. Behind Firewall I have to Configure Proxy Server - proxy=http://<proxy_server>:<proxy_port> this works only with newer Versions auf pam-yubico v2.21 ( see source/NEWS / for me OK )
2. If no url= or urllist= parameters are specified, pam-yubico uses https (SSL) to connect - Certificate of api.yubico.com is selfsigned, curl is unable to find a chain, so connect is denied and authentication failed
- How can I make curl been invoked with option --unsecure - or where I can get an proper cacerts File from - or other way to setup pam-yubico without url= or urllist= Parameters ( because URL may change, at this Moment it is api1 - api5. which shall i Use ? dosn't matter ? ) - where can I get the urllist from ( ykclient_set_url_bases I don't understand. Its a Programm ? Function Call ? )
at this Moment this works for me
auth required pam_yubico.so id=****** proxy=http://x.x.x.x:8080 url=http://api5.yubico.com/wsapi/2.0/verify?id=%d&otp=%s
|