vici: Add support for pubkey constraints with EAP-TLS

This is a feature currently supported by stroke.
2016-03-04 16:19:54 +01:00
parent 3c23a75120
commit 1ecec95dff
1 changed files with 8 additions and 0 deletions
@@ -982,8 +982,16 @@ CALLBACK(parse_auth, bool,
 	}
 	if (strcasepfx(buf, "eap"))
 	{
+		char *pos;
+
 		cfg->add(cfg, AUTH_RULE_AUTH_CLASS, AUTH_CLASS_EAP);

+		pos = strchr(buf, ':');
+		if (pos)
+		{
+			*pos = 0;
+			cfg->add_pubkey_constraints(cfg, pos + 1, FALSE);
+		}
 		type = eap_vendor_type_from_string(buf);
 		if (type)
 		{