aboutsummaryrefslogtreecommitdiffstats
path: root/udev
diff options
context:
space:
mode:
authorGravatar Christian Hesse <mail@eworm.de>2014-03-26 23:22:50 +0100
committerGravatar Christian Hesse <mail@eworm.de>2014-03-26 23:22:50 +0100
commitf1468a34e7be13749ee3e7e2e09517b0a0d302ac (patch)
tree60ad891b27d86affc65c371a7dbb3f5443ffee0a /udev
parente3e1baf903241f52689b820f9a751d66b6941aa6 (diff)
downloadmkinitcpio-ykfde-f1468a34e7be13749ee3e7e2e09517b0a0d302ac.tar.gz
mkinitcpio-ykfde-f1468a34e7be13749ee3e7e2e09517b0a0d302ac.tar.zst
allow to set slot for specific Yubikey
Diffstat (limited to 'udev')
-rw-r--r--udev/ykfde.c36
1 files changed, 25 insertions, 11 deletions
diff --git a/udev/ykfde.c b/udev/ykfde.c
index d82e8a4..05c72b4 100644
--- a/udev/ykfde.c
+++ b/udev/ykfde.c
@@ -102,11 +102,13 @@ int main(int argc, char **argv) {
/* Yubikey */
YK_KEY * yk;
uint8_t slot = SLOT_CHAL_HMAC2;
+ unsigned int serial = 0;
unsigned char response[SHA1_MAX_BLOCK_SIZE];
unsigned char response_hex[(SHA1_MAX_BLOCK_SIZE * 2) + 1];
char response_askpass[(SHA1_MAX_BLOCK_SIZE * 2) + 2];
/* iniparser */
dictionary * ini;
+ char section_serial[10 /* unsigned int in char */ + 5 /* ":Slot" */ + 1];
/* read challenge */
size_t fsize;
char * challenge;
@@ -147,11 +149,34 @@ int main(int argc, char **argv) {
challenge[fsize] = 0;
/* finished challenge */
+ /* init and open Yubikey */
+ if (!yk_init()) {
+ perror("yk_init() failed");
+ goto out30;
+ }
+
+ if ((yk = yk_open_first_key()) == NULL) {
+ perror("yk_open_first_key() failed");
+ goto out40;
+ }
+
+ /* read the serial number from key */
+ if(!yk_get_serial(yk, 0, 0, &serial)) {
+ perror("yk_get_serial() failed");
+ goto out40;
+ }
+
/* try to read config file
* if anything here fails we do not care... slot 2 is the default */
if ((ini = iniparser_load(CONFIGFILE)) != NULL) {
+ /* first try the general setting */
slot = iniparser_getint(ini, "general:Slot", slot);
+ sprintf(section_serial, "%d:Slot", serial);
+
+ /* then probe for setting with serial number */
+ slot = iniparser_getint(ini, section_serial, slot);
+
switch (slot) {
case '1':
slot = SLOT_CHAL_HMAC1;
@@ -164,17 +189,6 @@ int main(int argc, char **argv) {
iniparser_freedict(ini);
}
- /* init and open Yubikey */
- if (!yk_init()) {
- perror("yk_init() failed");
- goto out30;
- }
-
- if ((yk = yk_open_first_key()) == NULL) {
- perror("yk_open_first_key() failed");
- goto out40;
- }
-
memset(response, 0, sizeof(response));
memset(response_hex, 0, sizeof(response_hex));