denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

tls-peer: Mutual authentication support for TLS 1.3

Browse Source
This commit is contained in:
Pascal Knecht
2021-02-12 14:35:23 +01:00
committed by Tobias Brunner
parent 2d933f318b
commit 9ef46cfaf9
3 changed files with 176 additions and 56 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libtls/tls_crypto.c
+9 -2
View File
@@ -1775,7 +1775,14 @@ METHOD(tls_crypto_t, sign, bool,
DBG1(DBG_TLS, "unable to create transcript hash");
return FALSE;
}
data = chunk_cata("cm", tls13_sig_data_server, transcript_hash);
if (this->tls->is_server(this->tls))
{
data = chunk_cata("cm", tls13_sig_data_server, transcript_hash);
}
else
{
data = chunk_cata("cm", tls13_sig_data_client, transcript_hash);
}
}
if (!hashsig.len)
@@ -1884,7 +1891,7 @@ METHOD(tls_crypto_t, verify, bool,
tls_signature_scheme_names, scheme);
return FALSE;
}
if (this->tls->get_version_max(this->tls) == TLS_1_3)
if (this->tls->get_version_max(this->tls) >= TLS_1_3)
{
chunk_t transcript_hash;