Drop support for pre-shared key authentication
This commit is contained in:
committed by
Tobias Brunner
parent
c457128ab6
commit
0f5e57fe26
@@ -408,29 +408,7 @@ METHOD(keymat_v2_t, get_psk_sig, bool,
|
|||||||
private_tkm_keymat_t *this, bool verify, chunk_t ike_sa_init, chunk_t nonce,
|
private_tkm_keymat_t *this, bool verify, chunk_t ike_sa_init, chunk_t nonce,
|
||||||
chunk_t secret, identification_t *id, char reserved[3], chunk_t *sig)
|
chunk_t secret, identification_t *id, char reserved[3], chunk_t *sig)
|
||||||
{
|
{
|
||||||
DBG1(DBG_IKE, "returning %s PSK signature", verify ? "remote" : "local");
|
return FALSE;
|
||||||
|
|
||||||
signature_type signature;
|
|
||||||
init_message_type msg;
|
|
||||||
chunk_to_sequence(&ike_sa_init, &msg, sizeof(init_message_type));
|
|
||||||
|
|
||||||
chunk_t idx_chunk, chunk = chunk_alloca(4);
|
|
||||||
chunk.ptr[0] = id->get_type(id);
|
|
||||||
memcpy(chunk.ptr + 1, reserved, 3);
|
|
||||||
idx_chunk = chunk_cata("cc", chunk, id->get_encoding(id));
|
|
||||||
idx_type idx;
|
|
||||||
chunk_to_sequence(&idx_chunk, &idx, sizeof(idx_type));
|
|
||||||
|
|
||||||
if (ike_isa_sign_psk(this->isa_ctx_id, msg, idx, verify == TRUE, &signature)
|
|
||||||
!= TKM_OK)
|
|
||||||
{
|
|
||||||
DBG1(DBG_IKE, "get %s PSK signature failed", verify ?
|
|
||||||
"remote" : "local");
|
|
||||||
return FALSE;
|
|
||||||
}
|
|
||||||
|
|
||||||
sequence_to_chunk(&signature.data[0], signature.size, sig);
|
|
||||||
return TRUE;
|
|
||||||
}
|
}
|
||||||
|
|
||||||
METHOD(keymat_t, destroy, void,
|
METHOD(keymat_t, destroy, void,
|
||||||
|
|||||||
Reference in New Issue
Block a user