Pass NULL peer identity to omit TLS peer authentication, added eap-ttls.request_peer_auth option
This commit is contained in:
@@ -929,13 +929,11 @@ tls_crypto_t *tls_crypto_create(tls_t *tls)
|
||||
build_cipher_suite_list(this, FALSE);
|
||||
break;
|
||||
case TLS_PURPOSE_EAP_TTLS:
|
||||
case TLS_PURPOSE_EAP_TTLS_CLIENT_AUTH:
|
||||
/* MSK PRF ASCII constant label according to EAP-TTLS RFC 5281 */
|
||||
this->msk_label = "ttls keying material";
|
||||
build_cipher_suite_list(this, TRUE);
|
||||
break;
|
||||
case TLS_PURPOSE_GENERIC:
|
||||
case TLS_PURPOSE_GENERIC_CLIENT_AUTH:
|
||||
build_cipher_suite_list(this, TRUE);
|
||||
break;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user