eap-peap: Initiate Phase 2 immediately for TLS 1.3

Before TLS 1.3, the server sent the last handshake message and had the
option to piggyback the EAP-Identity request directly onto the packet
with the TLS Finished message, or wait for the empty message by the
client that acknowledges the completion of the handshake.  With TLS 1.3,
the client finishes the handshake after the server.  So this option
is irrelevant there and we immediately start with Phase 2.
This commit is contained in:
Tobias Brunner
2023-03-02 09:31:52 +01:00
parent edd3c797b0
commit 8aa13a1797
4 changed files with 37 additions and 7 deletions
@@ -24,6 +24,7 @@
typedef struct eap_peap_server_t eap_peap_server_t;
#include "tls.h"
#include "tls_application.h"
#include <library.h>
@@ -38,6 +39,14 @@ struct eap_peap_server_t {
* Implements the TLS application data handler.
*/
tls_application_t application;
/**
* Set a reference to the parent TLS connection this application is
* assigned to.
*
* @param tls TLS connection
*/
void (*set_tls)(eap_peap_server_t *this, tls_t *tls);
};
/**