optional certificate-based peer authentication on TLS server side

2010-08-15 13:02:57 +02:00
parent 758d7283fb
commit b51ac45c48
6 changed files with 49 additions and 23 deletions
@@ -441,8 +441,8 @@ static eap_ttls_t *eap_ttls_create(identification_t *server,
 		.is_server = is_server,
 	);
 	/* MSK PRF ASCII constant label according to EAP-TTLS RFC 5281 */
-	this->tls = tls_create(is_server, server, peer, "ttls keying material",
-						   application);
+	this->tls = tls_create(is_server, server, peer, FALSE,
+						   "ttls keying material", application);
 	return &this->public;
 }