Closed FreddyKaiser closed 10 years ago
Working on a solution to have at the user store the possibility to set and get the SerialNumber of the DN. The Serialnumber (if set) will then actively be checked on the signature return.
Moved into the new/separate freeradius-mobileid project
Provide an option to check actively against the security ID of the Mobile ID (Serialnumber in the DN) and refuse access in case of.
Possible solution: dedicated script/flag to track all returned SerialNumbers and store them in a File/DB. If not set, it will create it and after actively compare and reject users where the MSISDN:SerialNumber is not more the same. The mapping could then be removed/updated with an other script.