diff options
author | Christian Hesse <mail@eworm.de> | 2014-03-26 23:22:50 +0100 |
---|---|---|
committer | Christian Hesse <mail@eworm.de> | 2014-03-26 23:22:50 +0100 |
commit | f1468a34e7be13749ee3e7e2e09517b0a0d302ac (patch) | |
tree | 60ad891b27d86affc65c371a7dbb3f5443ffee0a /udev | |
parent | e3e1baf903241f52689b820f9a751d66b6941aa6 (diff) | |
download | mkinitcpio-ykfde-f1468a34e7be13749ee3e7e2e09517b0a0d302ac.tar.gz mkinitcpio-ykfde-f1468a34e7be13749ee3e7e2e09517b0a0d302ac.tar.zst |
allow to set slot for specific Yubikey
Diffstat (limited to 'udev')
-rw-r--r-- | udev/ykfde.c | 36 |
1 files changed, 25 insertions, 11 deletions
diff --git a/udev/ykfde.c b/udev/ykfde.c index d82e8a4..05c72b4 100644 --- a/udev/ykfde.c +++ b/udev/ykfde.c @@ -102,11 +102,13 @@ int main(int argc, char **argv) { /* Yubikey */ YK_KEY * yk; uint8_t slot = SLOT_CHAL_HMAC2; + unsigned int serial = 0; unsigned char response[SHA1_MAX_BLOCK_SIZE]; unsigned char response_hex[(SHA1_MAX_BLOCK_SIZE * 2) + 1]; char response_askpass[(SHA1_MAX_BLOCK_SIZE * 2) + 2]; /* iniparser */ dictionary * ini; + char section_serial[10 /* unsigned int in char */ + 5 /* ":Slot" */ + 1]; /* read challenge */ size_t fsize; char * challenge; @@ -147,11 +149,34 @@ int main(int argc, char **argv) { challenge[fsize] = 0; /* finished challenge */ + /* init and open Yubikey */ + if (!yk_init()) { + perror("yk_init() failed"); + goto out30; + } + + if ((yk = yk_open_first_key()) == NULL) { + perror("yk_open_first_key() failed"); + goto out40; + } + + /* read the serial number from key */ + if(!yk_get_serial(yk, 0, 0, &serial)) { + perror("yk_get_serial() failed"); + goto out40; + } + /* try to read config file * if anything here fails we do not care... slot 2 is the default */ if ((ini = iniparser_load(CONFIGFILE)) != NULL) { + /* first try the general setting */ slot = iniparser_getint(ini, "general:Slot", slot); + sprintf(section_serial, "%d:Slot", serial); + + /* then probe for setting with serial number */ + slot = iniparser_getint(ini, section_serial, slot); + switch (slot) { case '1': slot = SLOT_CHAL_HMAC1; @@ -164,17 +189,6 @@ int main(int argc, char **argv) { iniparser_freedict(ini); } - /* init and open Yubikey */ - if (!yk_init()) { - perror("yk_init() failed"); - goto out30; - } - - if ((yk = yk_open_first_key()) == NULL) { - perror("yk_open_first_key() failed"); - goto out40; - } - memset(response, 0, sizeof(response)); memset(response_hex, 0, sizeof(response_hex)); |