From 3b3ae60e0934a74b7cc34634740e720d574de3e2 Mon Sep 17 00:00:00 2001
From: Rhonda D'Vine <rhonda@proxmox.com>
Date: Mon, 18 Feb 2019 11:59:17 +0100
Subject: [PATCH] partially fix #2023: Switch to https for yubico.com API

Signed-off-by: Rhonda D'Vine <rhonda@proxmox.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
---
 src/PVE/OTP.pm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/PVE/OTP.pm b/src/PVE/OTP.pm
index c062639..019076b 100644
--- a/src/PVE/OTP.pm
+++ b/src/PVE/OTP.pm
@@ -55,7 +55,7 @@ sub yubico_verify_otp {
 
     die "yubico: wrong OTP length\n" if (length($otp) < 32) || (length($otp) > 48);
 
-    $url = 'http://api2.yubico.com/wsapi/2.0/verify' if !defined($url);
+    $url = 'https://api2.yubico.com/wsapi/2.0/verify' if !defined($url);
 
     my $params = {
 	nonce =>  Digest::SHA::hmac_sha1_hex(time(), rand()),
-- 
2.39.2