pquerna / mod_authn_yubikey

8 stars 7 forks source link

Use YubiCloud validation protocol version 2.0. #2

Open bshand opened 5 years ago

bshand commented 5 years ago

The old YubiCloud v1 protocol is deprecated from 2018-12-10 (50% of matching traffic will be rejected with an HTTP 410 response status), and rejected from 2019-02-04 (all requests rejected): https://status.yubico.com/2018/11/26/deprecating-yubicloud-v1-protocol-plain-text-requests-and-old-tls-versions/

This fix makes minimal changes to ensure that mod_authn_yubikey sends requests following the v2.0 protocol: https://developers.yubico.com/yubikey-val/Validation_Protocol_V2.0.html