Hardware based two factor authentication

Hardware based two factor authentication

[Stephen Major]

[-- Attachment #1: Type: text/plain, Size: 216 bytes --]

This is a two-fold question:


1) Can Wireguard be used directly with Yubikeys: https://www.yubico.com

2) Can Wireguard be used with a radius server like GreenRADIUS:
http://www.greenrocketsecurity.com/greenradius/

[-- Attachment #2: Type: text/html, Size: 416 bytes --]

Re: Hardware based two factor authentication

[Geo Kozey]

November 13, 2017 12:18:28 AM CET Stephen Major <smajor@gmail.com> wrote:
>This is a two-fold=C2=A0question:
>
>1) Can Wireguard=C2=A0be used directly with=C2=A0Yubikeys:=C2=A0https://ww=
w.yubico.com
>
>2) Can Wireguard=C2=A0be used with a radius server like GreenRADIUS:http:/=
/www.greenrocketsecurity.com/greenradius/
=C2=A0
In case of [1] you can store wireguard keys in pass (https://www.passwordst=
ore.org) database which is encrypted using yubikey smartcard  mode. See exa=
mple setup https://www.palkeo.com/sys/perfect-password-manager.html

Then you can add below command to your wg config, see https://git.zx2c4.com=
/WireGuard/about/src/tools/wg-quick.8:

PostUp =3D wg set %i private-key <(pass WireGuard/private-keys/%i)


Yours sincerely

G. K.