denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Query secrets in EAP-MD5 with me/other identities, fixing lookup in NetworkManager

Browse Source
This commit is contained in:
Martin Willi
2009-10-26 08:47:40 +01:00
parent 3dc40325d5
commit 140816b055
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/charon/plugins/eap_md5/eap_md5.c
+6 -6
View File
@@ -78,18 +78,18 @@ struct eap_md5_header_t {
/** /**
* Hash the challenge string, create response * Hash the challenge string, create response
*/ */
static status_t hash_challenge(private_eap_md5_t *this, chunk_t *response) static status_t hash_challenge(private_eap_md5_t *this, chunk_t *response,
identification_t *me, identification_t *other)
{ {
shared_key_t *shared; shared_key_t *shared;
chunk_t concat; chunk_t concat;
hasher_t *hasher; hasher_t *hasher;
shared = charon->credentials->get_shared(charon->credentials, SHARED_EAP, shared = charon->credentials->get_shared(charon->credentials, SHARED_EAP,
this->server, this->peer); me, other);
if (shared == NULL) if (shared == NULL)
{ {
DBG1(DBG_IKE, "no EAP key found for hosts '%Y' - '%Y'", DBG1(DBG_IKE, "no EAP key found for hosts '%Y' - '%Y'", me, other);
this->server, this->peer);
return NOT_FOUND; return NOT_FOUND;
} }
concat = chunk_cata("ccc", chunk_from_thing(this->identifier), concat = chunk_cata("ccc", chunk_from_thing(this->identifier),
@@ -161,7 +161,7 @@ static status_t process_peer(private_eap_md5_t *this,
DBG1(DBG_IKE, "received invalid EAP-MD5 message"); DBG1(DBG_IKE, "received invalid EAP-MD5 message");
return FAILED; return FAILED;
} }
if (hash_challenge(this, &response) != SUCCESS) if (hash_challenge(this, &response, this->peer, this->server) != SUCCESS)
{ {
return FAILED; return FAILED;
} }
@@ -192,7 +192,7 @@ static status_t process_server(private_eap_md5_t *this,
DBG1(DBG_IKE, "received invalid EAP-MD5 message"); DBG1(DBG_IKE, "received invalid EAP-MD5 message");
return FAILED; return FAILED;
} }
if (hash_challenge(this, &expected) != SUCCESS) if (hash_challenge(this, &expected, this->server, this->peer) != SUCCESS)
{ {
return FAILED; return FAILED;
} }