proxmox-mirrors/pve-access-control
1
0
Fork 0
mirror of https://git.proxmox.com/git/pve-access-control synced 2025-10-04 17:18:15 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

u2f: new perl bindings encode public key for us

Browse Source 
as it was binary data, which can contain everything, including '\0',
and this was cut off, making it impossible to login after
registration, as a borked publicKey got saved in tfa.cfg

Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
This commit is contained in:
Thomas Lamprecht 2019-04-09 12:44:23 +02:00
parent 4473c96caf
commit eb25cbafc3
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
PVE/API2/AccessControl.pm
View File

@ -589,7 +589,7 @@ __PACKAGE__->register_method ({
my ($keyHandle, $publicKey) = $u2f->registration_verify($response);
PVE::AccessControl::user_set_tfa($userid, $realm, 'u2f', {
keyHandle => $keyHandle,
publicKey => encode_base64($publicKey, ''),
publicKey => $publicKey, # already base64 encoded
});
} else {
die "invalid action: $action\n";