denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added strongswan.conf options for EAP-TLS/TTLS fragment size

Browse Source
This commit is contained in:
Martin Willi
2010-08-31 16:17:01 +02:00
parent 743f94067e
commit f9fc5f2045
4 changed files with 30 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/eap_ttls/eap_ttls.c
+10 -5
View File
@@ -46,7 +46,9 @@ struct private_eap_ttls_t {
};
/** Maximum number of EAP-TTLS messages/fragments allowed */
#define MAX_EAP_TTLS_MESSAGE_COUNT 32
#define MAX_MESSAGE_COUNT 32
/** Default size of a EAP-TTLS fragment */
#define MAX_FRAGMENT_LEN 1024
METHOD(eap_method_t, initiate, status_t,
private_eap_ttls_t *this, eap_payload_t **out)
@@ -68,10 +70,10 @@ METHOD(eap_method_t, process, status_t,
status_t status;
chunk_t data;
if (++this->processed > MAX_EAP_TTLS_MESSAGE_COUNT)
if (++this->processed > MAX_MESSAGE_COUNT)
{
DBG1(DBG_IKE, "EAP-TTLS packet count exceeded (%d > %d)",
this->processed, MAX_EAP_TTLS_MESSAGE_COUNT);
this->processed, MAX_MESSAGE_COUNT);
return FAILED;
}
data = in->get_data(in);
@@ -123,6 +125,7 @@ static eap_ttls_t *eap_ttls_create(identification_t *server,
tls_application_t *application)
{
private_eap_ttls_t *this;
size_t frag_size;
INIT(this,
.public = {
@@ -141,8 +144,10 @@ static eap_ttls_t *eap_ttls_create(identification_t *server,
{
peer = NULL;
}
this->tls_eap = tls_eap_create(EAP_TTLS, is_server,
server, peer, application);
frag_size = lib->settings->get_int(lib->settings,
"charon.plugins.eap-ttls.fragment_size", MAX_FRAGMENT_LEN);
this->tls_eap = tls_eap_create(EAP_TTLS, is_server, server, peer,
application, frag_size);
if (!this->tls_eap)
{
application->destroy(application);