Jean Paul Galea
847f288cf5
Refactor.
2015-07-21 21:03:03 +00:00
Jean Paul Galea
11c160b05c
Cosmetic changes.
2015-07-21 21:02:50 +00:00
Jean Paul Galea
e5238b8f54
Refactor.
...
- only add nonce to $extra array after check.
2015-07-21 20:56:02 +00:00
Jean Paul Galea
e24b02a7dc
Refactor.
...
- $new_otp not used afterwards,
clean up to avoid reuse by mistake.
2015-07-21 20:54:49 +00:00
Jean Paul Galea
84e867a6eb
Better grouping.
...
- no functional affect whatsoever.
2015-07-21 20:53:13 +00:00
Jean Paul Galea
0749db6e8f
More robust https check.
2015-07-21 20:49:17 +00:00
Jean Paul Galea
c5983f13eb
Refactor.
2015-07-21 20:45:57 +00:00
Jean Paul Galea
06d037ef09
Refactor.
2015-07-21 20:44:53 +00:00
Jean Paul Galea
937dd1a674
Refactor.
...
- avoid using $_SERVER vars in "core",
helps when debugging or running via cli.
2015-07-21 20:38:57 +00:00
Jean Paul Galea
3414c15eb4
Unwrap else block.
...
- sendResp calls exit()
2015-07-21 20:26:55 +00:00
Jean Paul Galea
1ca175ef2e
More minor fixes.
2015-07-21 20:26:37 +00:00
Jean Paul Galea
116d992da2
Refactor.
...
- $apiKey is initiliased further down.
2015-07-21 20:13:17 +00:00
Jean Paul Galea
b24eabeac4
Refactor.
...
- str substitution rather than concat.
- cosmetic changes.
2015-07-21 20:12:05 +00:00
Jean Paul Galea
7686afc4a7
double -> single quotes.
2015-07-21 20:01:24 +00:00
Jean Paul Galea
b417759932
Update copyright year.
2015-07-20 20:01:16 +00:00
Jean Paul Galea
c94f0d03a1
Refactor.
...
- getClientData() returns array or bool false on failure.
2015-07-18 00:19:04 +02:00
Jean Paul Galea
ef8a8640c7
FIXME markers.
2015-07-18 00:09:19 +02:00
Jean Paul Galea
ed169f49c5
Refactor.
...
- getLocalParams() returns array or bool false on failure.
2015-07-17 23:17:28 +02:00
Jean Paul Galea
e604477fff
Refactor.
...
- str sub instead of concat.
2015-07-17 23:11:32 +02:00
Jean Paul Galea
2b434df808
Refactor.
...
- removed duplicate variable.
2015-07-17 23:10:27 +02:00
Jean Paul Galea
8991c2c0c4
Cosmetic changes.
2015-07-17 23:01:36 +02:00
Jean Paul Galea
1e2568da3c
Refactor.
...
- KSMDecryptOTP returns array or bool false on failure.
2015-07-17 22:55:23 +02:00
Jean Paul Galea
8edf9ba465
Cosmetic changes.
2015-07-17 21:32:09 +02:00
Jean Paul Galea
ac3b4978b8
Cosmetic changes.
2015-07-17 21:30:30 +02:00
Jean Paul Galea
d9194c854d
Cosmetic changes.
2015-07-17 21:25:15 +02:00
Jean Paul Galea
a66322754d
Cosmetic changes.
2015-07-17 21:23:00 +02:00
Jean Paul Galea
2170247166
Cosmetic changes.
2015-07-17 21:20:14 +02:00
Jean Paul Galea
38c048b833
Cosmetic changes.
2015-07-17 21:17:29 +02:00
Jean Paul Galea
be27f62236
Cosmetic changes.
2015-07-17 21:16:40 +02:00
Jean Paul Galea
291bd32bae
Refactor.
...
- after each sendResp() we had an exit;
- move exit; inside sendResp() function instead.
2015-07-16 22:47:16 +02:00
Jean Paul Galea
bc5319327b
Unwrap function.
2015-07-16 22:35:34 +02:00
Jean Paul Galea
6e4b89048e
Refactor.
...
- better grouping for validation.
2015-07-16 15:39:42 +02:00
Jean Paul Galea
e76c5002f2
Drop php closing tags.
2015-07-15 15:14:25 +02:00
Jean Paul Galea
8df329aa0e
Allowed certain cURL options to be configurable.
...
- When calling either URLs in the sync pool or the KSMs,
the following curl options are configurable;
CURLOPT_PROTOCOLS
CURLOPT_IPRESOLVE
CURLOPT_SSLVERSION
CURLOPT_SSL_VERIFYPEER
CURLOPT_SSL_VERIFYHOST
CURLOPT_CAINFO
CURLOPT_CAPATH
2015-04-13 17:42:13 +02:00
Dain Nilsson
1b2dfd136c
Use constant time string comparisson for validating HMAC signature
...
(fixes #26 ).
2014-09-27 15:47:57 +02:00
Simon Josefsson
276616d871
Use LF as EOL consistently.
2013-04-17 17:24:50 +02:00
Simon Josefsson
ae217ceb10
Log query for POST requests too.
2013-03-12 11:23:25 +01:00
Dain Nilsson
ee1f040b00
Updated copyright headers.
2013-02-04 17:39:36 +01:00
Klas Lindfors
34706698a4
Merge branch 'master' into feature/oracle_support
...
Conflicts:
ykval-db.php
ykval-export.php
ykval-synclib.php
2012-06-29 10:33:41 +02:00
Fredrik Thulin
499377fd2f
Change protocol version logging to 'debug'.
2012-06-14 15:54:51 +02:00
Fredrik Thulin
6c80f76102
Get rid of debug() - use log_format() for the formatting part.
2012-06-14 15:23:53 +02:00
Fredrik Thulin
765620f17b
Merge branch 'master' of github.com:Yubico/yubikey-val-server-php into devel/refactor_retrieveURLasync
2012-06-14 15:19:19 +02:00
Fredrik Thulin
c8e9eb828f
Pass logger object to retrieveURLasync()
2012-06-14 15:19:04 +02:00
Klas Lindfors
6c9edb0db2
instead of passing context to sendResp, give it a logger.
2012-06-14 15:15:47 +02:00
Klas Lindfors
01969a279e
let sendResp take one more parameter $context
...
use for logging if it's a response to sync or verify.
2012-06-14 14:55:50 +02:00
Klas Lindfors
cf49385bf3
rest of oracle patches from Remi Mollon <Remi.Mollon@cern.ch>
2012-06-12 10:35:49 +02:00
Fredrik Thulin
b5976ad3c9
delete-trailing-whitespace
2012-05-29 11:07:19 +02:00
Klas Lindfors
6a94b396dc
check if $sl or $timeout is empty, if they are insert default
2012-05-24 14:37:01 +02:00
Simon Josefsson
f2b05822ef
Silence PHP warnings.
2012-05-21 09:12:33 +02:00
Klas Lindfors
2e0dbfa2c3
build up the array to sign by taking $_GET or $_POST and remove the h key
2012-05-16 13:45:08 +02:00