=== CryoKey ===
Contributors: cryokey
Tags: cryokey sso authentication
Requires at least: 3.4.1
Tested up to: 3.4.1
Stable tag: trunk
License: MIT
License URI: http://www.opensource.org/licenses/MIT

Allow the WordPress installation to use CryoKey authentication
if available.



== Description ==

This is the CryoKey example for WordPress. I tested it with
WordPress v3.4.1.

Under CryoKey, you log in or out using the CryoKey
certificate. Basically, if you have a valid CryoKey
certificate, you automatically view the page as the CryoKey
user. Instead of the login/logout link, you will see your
current CryoKey user name.

If you have a valid CryoKey certificate for an unknown user,
we can show a _Register_ link instead of Login/Logout. This
link auto-registers a user using his CryoKey credentials in a
single step. If you want this behavior, you must turn it on
from the administrator's options page (in _Settings_ submenu
_CryoKey_).

Note that CryoKey user names are E-Mail based, so the plugin
authenticates users based on their account's E-Mail address.
Auto-registration creates an account with the E-Mail address
as the login name (with a "CK" prefix), a random password, and
random name. You can change them to suit your needs. For
example, if you use credentials for `example@mailinator.com`,
automatic registration will create a user
 `CKexample@mailinator.com` with E-Mail address
 `example@mailinator.com` and a screen name such as
 `CKa9fha94h` with a random password.

If the user doesn't have (or doesn't want to use) CryoKey
credentials, the original WordPress login flow takes place.

For more information about CryoKey, visit:
  https://www.cryokey.com

On Facebook:
  http://www.facebook.com/pages/CryoKey/473618025991948

On Twitter:
  https://twitter.com/CryoKey

On Tumblr:
  http://cryokey.tumblr.com/



== Installation ==

To use the plugin, your web server must recognize the CryoKey
CA certificate found in https://www.cryokey.com/ca.pem. After
you download the CA certificate, configure your webserver to
load it. For example, in Apache, add the following line in
your WordPress `VirtualHosts` section (or Apache's global SSL
configuration):

    SSLCACertificateFile [path to CryoKey's CA Certificate]

Then, for your WordPress directory, you must configure Apache
using:

    SSLVerifyClient optional
    SSLVerifyDepth 1
    <FilesMatch "\.(cgi|shtml|phtml|php)$">
      SSLOptions +StdEnvVars
    </FilesMatch>

You can put those lines in the global SSL configuration, a
 `VirtualHosts` section, a `Directory` section, or even a
 `.htaccess` file (if you configured Apache using
 `AllowOverride AuthConfig` for your WordPress directory). Note
that the configuration will not work with Safari, which does
not recognize `SSLVerifyClient optional`. If a user with
Safari connects, he will go through the normal username and
password flow.

Once you configure your web server, put __cryokey.php__ and
__ckicon.png__ into __/wp-content/plugins__. Then activate the
plugin through the _Plugins_ menu in WordPress.



== Changelog ==

v1.2: Fixed a problem preventing regular login flow for unknown users when auto-login is disabled.

v1.1: Changed account lookups to use "email" instead of "login". Also, added CryoKey options page to change auto-registration settings.

v1.0: Initial Release