Tobias Brunner
19ef2aec15
Update copyright headers after acquisition by secunet
2022-06-28 10:22:56 +02:00
Tobias Brunner
f6aafb3005
Fixed some typos, courtesy of codespell
...
Main change is the conversion from the British cancelling/-ed to the
American canceling/-ed.
2021-06-25 11:32:29 +02:00
Tobias Brunner
024120f8ea
tls-eap: Only servers conclude EAP method after processing packets
...
As client with older TLS versions, we have to ack the receipt of the server's
Finished message instead.
Fixes: 083f38259c
2021-02-18 12:02:32 +01:00
Tobias Brunner
083f38259c
tls-eap: Conclude EAP method also after processing packets
...
With TLS 1.3, the server sends its Finished message first, so the
session is complete after processing the client's Finished message,
without having to send anything else (in particular no acknowledgement
as the last message from the client is no fragment).
2021-02-12 14:35:23 +01:00
Martin Willi
666c552381
libtls: Add getters for TLS handshake authentication details
2015-03-03 14:08:00 +01:00
Andreas Steffen
8d59090349
Implemented PT-EAP protocol (RFC 7171)
2014-05-12 06:59:21 +02:00
Tobias Brunner
f05b427265
Moved debug.[ch] to utils folder
2012-10-24 16:00:51 +02:00
Martin Willi
acada66a35
Use memmove on overlapping regions, and operate with correct sizeof()
2012-09-12 13:19:52 +02:00
Martin Willi
fb3cf1b708
Whitespace cleanups in tls_eap
2012-09-12 13:19:52 +02:00
Andreas Steffen
6245edf37e
eliminate message length field in EAP-TNC
2012-07-11 17:09:05 +02:00
Andreas Steffen
c36680962c
allow to transmit 64k TLS Handshake and Application messages via EAP-[T]TLS
2012-07-11 17:09:04 +02:00
Andreas Steffen
dfe82160e4
some tls_eap optimizations
2012-07-11 17:09:04 +02:00
Andreas Steffen
3bd452f8f3
max_message_count = 0 disables limit
2012-07-11 17:09:04 +02:00
Andreas Steffen
da67c37d65
log invalid TLS packet length
2012-07-11 17:09:04 +02:00
Andreas Steffen
4b06f9f265
debug type is EAP_TLS
2011-04-21 21:04:11 +02:00
Andreas Steffen
2778b6644b
do not include length field in non-fragmented EAP-PEAP packets
2011-04-21 19:52:49 +02:00
Andreas Steffen
6f69fb0134
implemented get|set_identifier() for tls_eap_t
2011-04-05 18:14:58 +02:00
Andreas Steffen
4d178affbb
call is_complete() if tls protocol returns with SUCCESS
2010-11-16 11:52:06 +01:00
Andreas Steffen
0cfdbaff2c
set EAP-TTLS/TNC version also in acknowledgement packets
2010-10-04 14:39:49 +02:00
Andreas Steffen
3b7eb3a9f4
added explanatory comments
2010-09-09 08:57:13 +02:00
Andreas Steffen
de29e3a683
max max_message_count configurable and move it into tls_eap_t
2010-09-08 12:58:45 +02:00
Andreas Steffen
51b385d44d
moved tls_t existance test into tls_eap_create() again
2010-09-08 11:09:11 +02:00
Andreas Steffen
d2b1d4378e
generalized tls_eap_t to support EAP_TNC wrapping the TNC_IF_TNCCS protocol
2010-09-08 11:01:53 +02:00
Andreas Steffen
54cba78573
cosmetics in debug output
2010-09-01 14:30:14 +02:00
Martin Willi
f9fc5f2045
Added strongswan.conf options for EAP-TLS/TTLS fragment size
2010-08-31 16:17:01 +02:00
Martin Willi
877c910f04
Implemented a generic TLS EAP helper to implement EAP-TLS, TTLS and other variants
2010-08-31 16:16:58 +02:00
Tobias Brunner