denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Initiate full authentication if reauthentication identity is unknown

Browse Source
This commit is contained in:
Martin Willi
2009-11-12 10:34:01 +01:00
parent edcb2dd35b
commit 2dbac2ab9c
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/charon/plugins/eap_sim/eap_sim_server.c
+6 -1
View File
@@ -419,7 +419,7 @@ static status_t process_start(private_eap_sim_server_t *this,
snprintf(buf, sizeof(buf), "%.*s", identity.len, identity.ptr); snprintf(buf, sizeof(buf), "%.*s", identity.len, identity.ptr);
id = identification_create_from_string(buf); id = identification_create_from_string(buf);
if (this->use_reauth) if (this->use_reauth && !nonce.len)
{ {
char mk[HASH_SIZE_SHA1]; char mk[HASH_SIZE_SHA1];
u_int16_t counter; u_int16_t counter;
@@ -434,6 +434,11 @@ static status_t process_start(private_eap_sim_server_t *this,
this->reauth = id; this->reauth = id;
return reauthenticate(this, mk, counter, out); return reauthenticate(this, mk, counter, out);
} }
DBG1(DBG_IKE, "received unknown reauthentication identity '%Y', "
"initiating full authentication", id);
this->use_reauth = FALSE;
id->destroy(id);
return initiate(this, out);
} }
if (this->use_pseudonym) if (this->use_pseudonym)
{ {