Extension:CryoKey

The CryoKey extension will add support for CryoKey credentials if the user has them and the server recognizes them.

Download
Get the plugin at:


 * https://www.cryokey.com/mw-plugin.tgz

Installation
Unpack cryokey.php from the tarball and copy it to the extensions directory in MediaWiki. Then add the following code to your LocalSettings.php (at the bottom):


 * require_once( "$IP/extensions/cryokey.php" );

Verify the installation by checking Special:Version on your wiki.

To use the plugin, your web server must recognize the CryoKey CA certificate found in https://www.cryokey.com/ca.pem. For example, in Apache's SSL configuration, you can add the lines:

SSLVerifyClient optional SSLVerifyDepth 1 SSLCACertificateFile [path to CryoKey's CA Certificate]  SSLOptions +StdEnvVars 

If your MediaWiki directory has the AllowOverride AuthConfig directive, you can instead specify the options within a .htaccess file in your MediaWiki directory. However, the SSLCACertificateFile (or SSLCACertificatePath) directives must be in Apache's server or virtual host configuration.

Note that the configuration will not work with Safari, which will not recognize SSLVerifyClient optional. If a user with Safari connects, he will go through the normal username and password flow.