194 lines
7.5 KiB
Scheme
194 lines
7.5 KiB
Scheme
;;; GNU Guix --- Functional package management for GNU
|
||
;;; Copyright © 2018, 2020, 2021 Tobias Geerinckx-Rice <me@tobias.gr>
|
||
;;; Copyright © 2019, 2020, 2022 Ricardo Wurmus <rekado@elephly.net>
|
||
;;; Copyright © 2020 B. Wilson <elaexuotee@wilsonb.com>
|
||
;;;
|
||
;;; This file is part of GNU Guix.
|
||
;;;
|
||
;;; GNU Guix is free software; you can redistribute it and/or modify it
|
||
;;; under the terms of the GNU General Public License as published by
|
||
;;; the Free Software Foundation; either version 3 of the License, or (at
|
||
;;; your option) any later version.
|
||
;;;
|
||
;;; GNU Guix is distributed in the hope that it will be useful, but
|
||
;;; WITHOUT ANY WARRANTY; without even the implied warranty of
|
||
;;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||
;;; GNU General Public License for more details.
|
||
;;;
|
||
;;; You should have received a copy of the GNU General Public License
|
||
;;; along with GNU Guix. If not, see <http://www.gnu.org/licenses/>.
|
||
|
||
(define-module (gnu packages authentication)
|
||
#:use-module (gnu packages)
|
||
#:use-module (gnu packages autotools)
|
||
#:use-module (gnu packages documentation)
|
||
#:use-module (gnu packages gnupg)
|
||
#:use-module (gnu packages linux)
|
||
#:use-module (gnu packages pkg-config)
|
||
#:use-module (gnu packages security-token)
|
||
#:use-module (gnu packages tls)
|
||
#:use-module (gnu packages xml)
|
||
#:use-module (guix build-system cmake)
|
||
#:use-module (guix build-system gnu)
|
||
#:use-module (guix build-system go)
|
||
#:use-module (guix download)
|
||
#:use-module (guix git-download)
|
||
#:use-module ((guix licenses) #:prefix license:)
|
||
#:use-module (guix packages))
|
||
|
||
(define-public libcotp
|
||
(package
|
||
(name "libcotp")
|
||
(version "2.0.1")
|
||
(source
|
||
(origin
|
||
(method git-fetch)
|
||
(uri (git-reference
|
||
(url "https://github.com/paolostivanin/libcotp")
|
||
(commit (string-append "v" version))))
|
||
(file-name (git-file-name name version))
|
||
(sha256
|
||
(base32 "12ps2msclcbv53gjf936cny10an8sc70b9frp6xxjirfn5jg2h63"))))
|
||
(build-system cmake-build-system)
|
||
(inputs (list libgcrypt))
|
||
(native-inputs (list pkg-config))
|
||
(home-page "https://github.com/paolostivanin/libcotp")
|
||
(synopsis "One-Time Passwords")
|
||
(description "This package provides a library to generate
|
||
@acronym{HOTP, HMAC-base One-Time Password}s as specified in RFC 4226 and
|
||
@acronym{TOTP, Time-based One-Time Password}s as specified in RFC 6238.")
|
||
(license license:asl2.0)))
|
||
|
||
(define-public oath-toolkit
|
||
(package
|
||
(name "oath-toolkit")
|
||
(version "2.6.9")
|
||
(source
|
||
(origin
|
||
(method url-fetch)
|
||
(uri (string-append "https://download.savannah.nongnu.org/releases/"
|
||
name "/" name "-" version ".tar.gz"))
|
||
(sha256
|
||
(base32 "11g9r1avl3d2nnkglk0g7d6z6gs5padk75xqzvbxp9pir0qwhfik"))))
|
||
(build-system gnu-build-system)
|
||
(arguments
|
||
;; TODO ‘--enable-pskc’ causes xmlsec-related test suite failures.
|
||
`(#:configure-flags
|
||
(list "--enable-pam"
|
||
"--enable-pskc"
|
||
"--with-xmlsec-crypto-engine=openssl")
|
||
#:phases
|
||
(modify-phases %standard-phases
|
||
(add-after 'install 'delete-static-libraries
|
||
(lambda* (#:key outputs #:allow-other-keys)
|
||
(let* ((out (assoc-ref outputs "out"))
|
||
(lib (string-append out "/lib")))
|
||
(for-each delete-file (find-files lib "\\.a$"))
|
||
#t))))))
|
||
(native-inputs
|
||
(list pkg-config
|
||
;; XXX: Perhaps this should be propagated from xmlsec.
|
||
libltdl))
|
||
(inputs
|
||
(list linux-pam openssl xmlsec-openssl))
|
||
(home-page "https://www.nongnu.org/oath-toolkit/")
|
||
(synopsis "@acronym{OTP, one-time password} components")
|
||
(description
|
||
"The @acronym{OATH, Open AuTHentication} Toolkit provides various
|
||
components for building @acronym{OTP, One-Time Password} authentication systems:
|
||
|
||
@itemize
|
||
@item @command{oathtool}, a command-line tool for generating & validating OTPs.
|
||
@item @code{liboath}, a C library for OATH handling.
|
||
@item @command{pskctool}, a command-line tool for manipulating secret key
|
||
files in the @acronym{PSKC, Portable Symmetric Key Container} format
|
||
described in RFC6030.
|
||
@item @code{libpskc}, a shared and static C library for PSKC handling.
|
||
@item @code{pam_oath}, a PAM module for pluggable login authentication.
|
||
@end itemize
|
||
|
||
Supported technologies include the event-based @acronym{HOTP, Hash-based Message
|
||
Authentication Code One-Time Password} algorithm (RFC4226), the time-based
|
||
@acronym{TOTP, Time-based One-Time Password} algorithm (RFC6238), and
|
||
PSKC (RFC6030) to manage secret key data.")
|
||
(license (list license:lgpl2.1+ ; the libraries (liboath/ & libpskc/)
|
||
license:gpl3+)))) ; the tools (everything else)
|
||
|
||
(define-public oauth2l
|
||
(package
|
||
(name "oauth2l")
|
||
(version "1.3.0")
|
||
(source
|
||
(origin
|
||
(method git-fetch)
|
||
(uri (git-reference
|
||
(url "https://github.com/google/oauth2l")
|
||
(commit (string-append "v" version))))
|
||
(file-name (git-file-name name version))
|
||
(sha256
|
||
(base32 "0010870xdhf0aysrs2vhl3yxd4gh87qp7mjpyp7qy1n2rz55pgbc"))))
|
||
(build-system go-build-system)
|
||
(arguments
|
||
'(#:import-path "github.com/google/oauth2l"))
|
||
(home-page "https://github.com/google/oauth2l")
|
||
(synopsis "Simple CLI for interacting with Google API authentication")
|
||
(description
|
||
"@code{oauth2l} (pronounced ``oauth tool'') is a simple command-line tool
|
||
for working with @url{https://developers.google.com/identity/protocols/OAuth2,
|
||
Google OAuth 2.0} written in Go. Its primary use is to fetch and print OAuth
|
||
2.0 access tokens, which can be used with other command-line tools and
|
||
scripts.")
|
||
(license license:asl2.0)))
|
||
|
||
(define-public yubico-pam
|
||
(package
|
||
(name "yubico-pam")
|
||
(version "2.27")
|
||
(source (origin
|
||
(method git-fetch)
|
||
(uri (git-reference
|
||
(url "https://github.com/Yubico/yubico-pam")
|
||
(commit version)))
|
||
(file-name (git-file-name name version))
|
||
(sha256
|
||
(base32
|
||
"0hb773zlf11xz4bwmsqv2mq5d4aq2g0crdr5cp9xwc4ivi5gd4kg"))))
|
||
(build-system gnu-build-system)
|
||
(arguments
|
||
;; The pam_test fails because ykclient fails to build a Curl handle.
|
||
'(#:make-flags '("TESTS=util_test")))
|
||
(inputs
|
||
(list linux-pam libyubikey ykclient yubikey-personalization))
|
||
(native-inputs
|
||
(list autoconf automake libtool asciidoc pkg-config))
|
||
(home-page "https://developers.yubico.com/yubico-pam")
|
||
(synopsis "Yubico pluggable authentication module")
|
||
(description "The Yubico PAM module provides an easy way to integrate the
|
||
YubiKey into your existing user authentication infrastructure.")
|
||
(license license:bsd-2)))
|
||
|
||
(define-public pamtester
|
||
(package
|
||
(name "pamtester")
|
||
(version "0.1.2")
|
||
(source
|
||
(origin
|
||
(method url-fetch)
|
||
(uri (string-append
|
||
"mirror://sourceforge/pamtester/pamtester/"
|
||
version "/pamtester-" version ".tar.gz"))
|
||
(sha256
|
||
(base32 "1mdj1wj0adcnx354fs17928yn2xfr1hj5mfraq282dagi873sqw3"))))
|
||
(build-system gnu-build-system)
|
||
(native-inputs
|
||
(list pkg-config))
|
||
(inputs
|
||
(list linux-pam))
|
||
(home-page "https://pamtester.sourceforge.net/")
|
||
(synopsis "Utility for testing pluggable authentication modules (PAM) facility")
|
||
(description
|
||
"Pamtester is a tiny utility program to test the pluggable authentication
|
||
modules (PAM) facility, specifically designed to help PAM module authors to
|
||
intensively test their own modules.")
|
||
(license license:bsd-3)))
|