keymat: Store signature info in auth octets
Store the ISA context id and the initial message in the auth octets chunk using the sign_info_t struct. Charon will pass on this information to the TKM private key sign operation where it is extracted.
This commit is contained in:
committed by
Tobias Brunner
parent
a2f97ff860
commit
fe504b745d
@@ -366,9 +366,21 @@ METHOD(keymat_v2_t, get_auth_octets, bool,
|
|||||||
{
|
{
|
||||||
/* store peer init message for authentication step */
|
/* store peer init message for authentication step */
|
||||||
this->other_init_msg = chunk_clone(ike_sa_init);
|
this->other_init_msg = chunk_clone(ike_sa_init);
|
||||||
|
*octets = chunk_empty;
|
||||||
|
return TRUE;
|
||||||
}
|
}
|
||||||
DBG1(DBG_IKE, "returning auth octets");
|
|
||||||
*octets = chunk_empty;
|
sign_info_t *sign;
|
||||||
|
INIT(sign,
|
||||||
|
.isa_id = this->isa_ctx_id,
|
||||||
|
.init_message = chunk_clone(ike_sa_init),
|
||||||
|
);
|
||||||
|
|
||||||
|
/*
|
||||||
|
* store signature info in AUTH octets, which is passed to the private key
|
||||||
|
* sign() operation
|
||||||
|
*/
|
||||||
|
*octets = chunk_create((u_char *)sign, sizeof(sign_info_t));
|
||||||
return TRUE;
|
return TRUE;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user