From 70e723c000e46e2304e54f8063572d7fa0cdad46 Mon Sep 17 00:00:00 2001
From: MkfsSion <mkfssion@mkfssion.com>
Date: Sun, 17 Apr 2022 15:42:49 +0800
Subject: cryptenroll,homectl: Introduce --fido2-credential-algorithm option

* Some authenticators(like Yubikey) support credential algorithm other than ES256
* Introduce a new option so users can make use of it
---
 src/cryptenroll/cryptenroll-fido2.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'src/cryptenroll/cryptenroll-fido2.c')

diff --git a/src/cryptenroll/cryptenroll-fido2.c b/src/cryptenroll/cryptenroll-fido2.c
index b519b8651b..80adaefa17 100644
--- a/src/cryptenroll/cryptenroll-fido2.c
+++ b/src/cryptenroll/cryptenroll-fido2.c
@@ -12,7 +12,8 @@ int enroll_fido2(
                 const void *volume_key,
                 size_t volume_key_size,
                 const char *device,
-                Fido2EnrollFlags lock_with) {
+                Fido2EnrollFlags lock_with,
+                int cred_alg) {
 
         _cleanup_(erase_and_freep) void *salt = NULL, *secret = NULL;
         _cleanup_(erase_and_freep) char *base64_encoded = NULL;
@@ -42,6 +43,7 @@ int enroll_fido2(
                         /* user_icon_name= */ NULL,
                         /* askpw_icon_name= */ "drive-harddisk",
                         lock_with,
+                        cred_alg,
                         &cid, &cid_size,
                         &salt, &salt_size,
                         &secret, &secret_size,
-- 
cgit v1.2.3