denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

EAP-TNC does not support fragmentation

Browse Source
This commit is contained in:
Andreas Steffen
2012-07-11 17:09:04 +02:00
parent c36680962c
commit 4492ffc907
2 changed files with 14 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
man/strongswan.conf.5.in
-6
View File
@@ -399,15 +399,9 @@ Maximum number of processed EAP-TLS packets (0 = no limit)
.BR charon.plugins.eap-tls.include_length " [yes]" .BR charon.plugins.eap-tls.include_length " [yes]"
Include length in non-fragmented EAP-TLS packets Include length in non-fragmented EAP-TLS packets
.TP .TP
.BR charon.plugins.eap-tnc.fragment_size " [50000]"
Maximum size of an EAP-TNC packet
.TP
.BR charon.plugins.eap-tnc.max_message_count " [10]" .BR charon.plugins.eap-tnc.max_message_count " [10]"
Maximum number of processed EAP-TNC packets (0 = no limit) Maximum number of processed EAP-TNC packets (0 = no limit)
.TP .TP
.BR charon.plugins.eap-tnc.include_length " [yes]"
Include length in non-fragmented EAP-TNC packets
.TP
.BR charon.plugins.eap-ttls.fragment_size " [1024]" .BR charon.plugins.eap-ttls.fragment_size " [1024]"
Maximum size of an EAP-TTLS packet Maximum size of an EAP-TTLS packet
.TP .TP
src/libcharon/plugins/eap_tnc/eap_tnc.c
+14 -12
View File
@@ -21,6 +21,16 @@
#include <debug.h> #include <debug.h>
#include <daemon.h> #include <daemon.h>
/**
* Maximum size of an EAP-TNC message
*/
#define EAP_TNC_MAX_MESSAGE_LEN 65535
/**
* Maximum number of EAP-TNC messages allowed
*/
#define EAP_TNC_MAX_MESSAGE_COUNT 10
typedef struct private_eap_tnc_t private_eap_tnc_t; typedef struct private_eap_tnc_t private_eap_tnc_t;
/** /**
@@ -39,12 +49,6 @@ struct private_eap_tnc_t {
tls_eap_t *tls_eap; tls_eap_t *tls_eap;
}; };
/** Maximum number of EAP-TNC messages/fragments allowed */
#define MAX_MESSAGE_COUNT 10
/** Default size of a EAP-TNC fragment */
#define MAX_FRAGMENT_LEN 50000
METHOD(eap_method_t, initiate, status_t, METHOD(eap_method_t, initiate, status_t,
private_eap_tnc_t *this, eap_payload_t **out) private_eap_tnc_t *this, eap_payload_t **out)
{ {
@@ -147,12 +151,9 @@ static eap_tnc_t *eap_tnc_create(identification_t *server,
}, },
); );
frag_size = lib->settings->get_int(lib->settings,
"%s.plugins.eap-tnc.fragment_size", MAX_FRAGMENT_LEN,
charon->name);
max_msg_count = lib->settings->get_int(lib->settings, max_msg_count = lib->settings->get_int(lib->settings,
"%s.plugins.eap-tnc.max_message_count", MAX_MESSAGE_COUNT, "%s.plugins.eap-tnc.max_message_count",
charon->name); EAP_TNC_MAX_MESSAGE_COUNT, charon->name);
include_length = lib->settings->get_bool(lib->settings, include_length = lib->settings->get_bool(lib->settings,
"%s.plugins.eap-tnc.include_length", TRUE, charon->name); "%s.plugins.eap-tnc.include_length", TRUE, charon->name);
protocol = lib->settings->get_str(lib->settings, protocol = lib->settings->get_str(lib->settings,
@@ -176,7 +177,8 @@ static eap_tnc_t *eap_tnc_create(identification_t *server,
return NULL; return NULL;
} }
tnccs = tnc->tnccs->create_instance(tnc->tnccs, type, is_server); tnccs = tnc->tnccs->create_instance(tnc->tnccs, type, is_server);
this->tls_eap = tls_eap_create(EAP_TNC, (tls_t*)tnccs, frag_size, this->tls_eap = tls_eap_create(EAP_TNC, (tls_t*)tnccs,
EAP_TNC_MAX_MESSAGE_LEN,
max_msg_count, include_length); max_msg_count, include_length);
if (!this->tls_eap) if (!this->tls_eap)
{ {