cambridgeuniversity / mod_ucam_webauth

Ucam WebAuth Apache authentication agent (mod_ucam_webauth)
GNU Lesser General Public License v2.1
7 stars 9 forks source link

Better public key management (build table of valid keys) (#24) #9

Open jw35 opened 7 years ago

jw35 commented 7 years ago

RAVEN076 in master TODO list

jw35 commented 7 years ago

The current arrangement (tries to) read Ucam Webauth public keys from the file system each item the module processes an authentication response. Better would be to read all the available keys in at server startup time and then just reference them fro internal storage. The downside would be that a server reload would be needed to load new keys, but that's very rare (too rare, actually...)