summaryrefslogtreecommitdiffstats
path: root/src/cryptenroll
diff options
context:
space:
mode:
authorLennart Poettering <lennart@poettering.net>2024-02-19 17:30:56 +0100
committerLennart Poettering <lennart@poettering.net>2024-02-20 16:50:00 +0100
commit251c71b62bb2f43dd6815c9a99e2d059a0ce2aef (patch)
tree3d33bba9fb29f1e2a7b13a240674025c8d7eb5a1 /src/cryptenroll
parentpcrlock: normalize credential name for TPM2 PIN (diff)
downloadsystemd-251c71b62bb2f43dd6815c9a99e2d059a0ce2aef.tar.xz
systemd-251c71b62bb2f43dd6815c9a99e2d059a0ce2aef.zip
libfido2: tweak credential to read fido2 PIN from
Querying a fido2 PIN via askpw for enrolling is currently used in two places: cryptenroll and homectl. So far we sloppily used the same fixed credential name "fido2-pin" in both cases. Let's tweak that and make the credential name match the other credentials cryptenroll or home query, i.e. using the cryptenroll.* and home.* namespaces. This is particular done in light of #31370, which wants to make the credential name public. We really should get the name in order before making it public.
Diffstat (limited to 'src/cryptenroll')
-rw-r--r--src/cryptenroll/cryptenroll-fido2.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/src/cryptenroll/cryptenroll-fido2.c b/src/cryptenroll/cryptenroll-fido2.c
index 2baeb92e07..7e35dca9c5 100644
--- a/src/cryptenroll/cryptenroll-fido2.c
+++ b/src/cryptenroll/cryptenroll-fido2.c
@@ -97,6 +97,7 @@ int enroll_fido2(
/* user_display_name= */ node,
/* user_icon_name= */ NULL,
/* askpw_icon_name= */ "drive-harddisk",
+ /* askpw_credential= */ "cryptenroll.fido2-pin",
lock_with,
cred_alg,
&cid, &cid_size,