denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added a TLS purpose for EAP-TTLS with client authentication

Browse Source
This commit is contained in:
Martin Willi
2010-08-23 15:13:48 +02:00
parent 5ff8c62707
commit c310881a11
3 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libtls/tls.h
+2
View File
@@ -96,6 +96,8 @@ enum tls_purpose_t {
TLS_PURPOSE_EAP_TLS, TLS_PURPOSE_EAP_TLS,
/** outer authentication and protection in EAP-TTLS */ /** outer authentication and protection in EAP-TTLS */
TLS_PURPOSE_EAP_TTLS, TLS_PURPOSE_EAP_TTLS,
/** EAP-TTLS with client authentication */
TLS_PURPOSE_EAP_TTLS_CLIENT_AUTH,
}; };
/** /**
src/libtls/tls_crypto.c
+1
View File
@@ -926,6 +926,7 @@ tls_crypto_t *tls_crypto_create(tls_t *tls)
build_cipher_suite_list(this, FALSE); build_cipher_suite_list(this, FALSE);
break; break;
case TLS_PURPOSE_EAP_TTLS: case TLS_PURPOSE_EAP_TTLS:
case TLS_PURPOSE_EAP_TTLS_CLIENT_AUTH:
/* MSK PRF ASCII constant label according to EAP-TTLS RFC 5281 */ /* MSK PRF ASCII constant label according to EAP-TTLS RFC 5281 */
this->msk_label = "ttls keying material"; this->msk_label = "ttls keying material";
build_cipher_suite_list(this, TRUE); build_cipher_suite_list(this, TRUE);
src/libtls/tls_server.c
+1
View File
@@ -682,6 +682,7 @@ tls_server_t *tls_server_create(tls_t *tls,
switch (tls->get_purpose(tls)) switch (tls->get_purpose(tls))
{ {
case TLS_PURPOSE_EAP_TLS: case TLS_PURPOSE_EAP_TLS:
case TLS_PURPOSE_EAP_TTLS_CLIENT_AUTH:
this->request_peer_auth = TRUE; this->request_peer_auth = TRUE;
break; break;
case TLS_PURPOSE_EAP_TTLS: case TLS_PURPOSE_EAP_TTLS: