Skip to content

Commit

Permalink
Make yubikey less picky about what it'll generate tokens for
Browse files Browse the repository at this point in the history
The protocol should validate which form fields are OK; no need to apply
CSTP-specific filters (which are now out of date) in the yubikey code.

Signed-off-by: David Woodhouse <dwmw2@infradead.org>
  • Loading branch information
dwmw2 committed Oct 3, 2018
1 parent 6a2ce5d commit d93bf0d
Showing 1 changed file with 1 addition and 2 deletions.
3 changes: 1 addition & 2 deletions yubikey.c
Expand Up @@ -480,8 +480,7 @@ int can_gen_yubikey_code(struct openconnect_info *vpninfo,
struct oc_auth_form *form,
struct oc_form_opt *opt)
{
if ((strcmp(opt->name, "secondary_password") != 0) ||
vpninfo->token_bypassed)
if (vpninfo->token_bypassed)
return -EINVAL;
if (vpninfo->token_tries == 0) {
vpn_progress(vpninfo, PRG_DEBUG,
Expand Down

0 comments on commit d93bf0d

Please sign in to comment.