partially fix #2023: Switch to https for yubico.com API

[pve-common.git] / src / PVE / OTP.pm

diff --git a/src/PVE/OTP.pm b/src/PVE/OTP.pm
index c062639cc6b94bd085a29c5daaf48ee0ef29647e..019076b444c9e914ef8e62a363bb1f2e73faac29 100644 (file)
--- a/src/PVE/OTP.pm
+++ b/src/PVE/OTP.pm
@@ -55,7 +55,7 @@ sub yubico_verify_otp {
 
     die "yubico: wrong OTP length\n" if (length($otp) < 32) || (length($otp) > 48);
 
-    $url = 'http://api2.yubico.com/wsapi/2.0/verify' if !defined($url);
+    $url = 'https://api2.yubico.com/wsapi/2.0/verify' if !defined($url);
 
     my $params = {
        nonce =>  Digest::SHA::hmac_sha1_hex(time(), rand()),