denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

vici: Add support for pubkey constraints with EAP-TLS

Browse Source 
This is a feature currently supported by stroke.
This commit is contained in:
Tobias Brunner
2016-03-04 16:19:54 +01:00
parent 3c23a75120
commit 1ecec95dff
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/vici/vici_config.c
+8
View File
@@ -982,8 +982,16 @@ CALLBACK(parse_auth, bool,
} }
if (strcasepfx(buf, "eap")) if (strcasepfx(buf, "eap"))
{ {
char *pos;
cfg->add(cfg, AUTH_RULE_AUTH_CLASS, AUTH_CLASS_EAP); cfg->add(cfg, AUTH_RULE_AUTH_CLASS, AUTH_CLASS_EAP);
pos = strchr(buf, ':');
if (pos)
{
*pos = 0;
cfg->add_pubkey_constraints(cfg, pos + 1, FALSE);
}
type = eap_vendor_type_from_string(buf); type = eap_vendor_type_from_string(buf);
if (type) if (type)
{ {