denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Don't allow NULL encryption with PEAP

Browse Source
This commit is contained in:
Martin Willi
2012-09-12 13:19:52 +02:00
parent acada66a35
commit ab2c989c32
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libtls/tls_crypto.c
+3 -1
View File
@@ -1752,10 +1752,12 @@ tls_crypto_t *tls_crypto_create(tls_t *tls, tls_cache_t *cache)
switch (tls->get_purpose(tls)) switch (tls->get_purpose(tls))
{ {
case TLS_PURPOSE_EAP_TLS: case TLS_PURPOSE_EAP_TLS:
case TLS_PURPOSE_EAP_PEAP:
/* MSK PRF ASCII constant label according to EAP-TLS RFC 5216 */ /* MSK PRF ASCII constant label according to EAP-TLS RFC 5216 */
this->msk_label = "client EAP encryption"; this->msk_label = "client EAP encryption";
build_cipher_suite_list(this, FALSE); build_cipher_suite_list(this, FALSE);
case TLS_PURPOSE_EAP_PEAP:
this->msk_label = "client EAP encryption";
build_cipher_suite_list(this, TRUE);
break; break;
case TLS_PURPOSE_EAP_TTLS: case TLS_PURPOSE_EAP_TTLS:
/* MSK PRF ASCII constant label according to EAP-TTLS RFC 5281 */ /* MSK PRF ASCII constant label according to EAP-TTLS RFC 5281 */