The new Yubico OTP validation server beta is ready, with bugfixes on hmac signature
and the security policy options that each Yubikey client (issuer) can set after they
log in to Yubikey management service in [1] below:
[1] You can now turn on/off of signature & (client) id checking for your Yubikeys at:
http://63.146.69.105/yms/[2] And, you can use this to test the signature generated by your API key:
http://63.146.69.105/wsapi/sign_demo.php[3] To validate an OTP:
Debug mode:
http://63.146.69.105/wsapi/verify_debug ... ....&h=....
Production mode:
http://63.146.69.105/wsapi/verify?id=...&otp=....&h=....
!!! This beta server's database is standalone used only for testing purposes.
It is NOT the same database used for the production behind
http://api.yubico.com.
Thanks for comments