<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div style="font-family: Verdana;font-size: 12.0px;">
<div style="font-family: Verdana;font-size: 12.0px;">
<div>
<div> </div>
<div>Hi,<br/>
<br/>
at the moment we’re using a https-Wrapper-Service in our firewall-appliance to manage restricted access to some of our websites. For two factor authentication we’re using privacyIDEA as radius server. Most of our users/employees are using for one time password generation the "Google Authenticator" App. Some are using "Feitian C-200" (but I do not like the C-200, because I do not know how to program a new seed by myself). Both generators are based on the quite simple TOTP Algorithm (<a href="https://tools.ietf.org/html/rfc6238" target="_blank">https://tools.ietf.org/html/rfc6238</a>). The https-password is a combination of a fixed password directly followed by the TOTP password.</div>
<div><br/>
Because we want to change the firewall-appliance, we have to find a new solution. Is it possible (or is it a planned feature for the near future) to handle authentication in stunnel with radius? Or even better/simpler, is TOTP supported by stunnel? I wasn't able to find anything like this in the documentation.<br/>
<br/>
Regards,<br/>
Martin</div>
</div>
</div>
<div> </div>
<div class="signature"> </div>
</div></div></body></html>