jeltz/hostap
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

EAP-TLS peer: Handle Commitment Message for TLS 1.3

Browse source 
Recognize the explicitly defined Commitment Message per
draft-ietf-emu-eap-tls13-13 at the conclusion of the EAP-TLS with TLS
1.3.

Signed-off-by: Alexander Clouter <alex@digriz.org.uk>
This commit is contained in:
Alexander Clouter 2020-10-16 09:49:38 +01:00 committed by Jouni Malinen
parent 3a457509db
commit 155125b02a
1 changed files with 4 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
src/eap_peer/eap_tls.c
View file

@ -302,15 +302,11 @@ static struct wpabuf * eap_tls_process(struct eap_sm *sm, void *priv,
return NULL;
}
if (res == 2) {
/* Application data included in the handshake message (used by
* EAP-TLS 1.3 to indicate conclusion of the exchange). */
wpa_hexdump_buf(MSG_DEBUG, "EAP-TLS: Received Application Data",
resp);
wpa_hexdump_buf(MSG_DEBUG, "EAP-TLS: Remaining tls_out data",
data->ssl.tls_out);
/* draft-ietf-emu-eap-tls13-13 Section 2.5 */
if (res == 2 && data->ssl.tls_v13 && wpabuf_len(resp) == 1 &&
*wpabuf_head_u8(resp) == 0) {
wpa_printf(MSG_DEBUG, "EAP-TLS: ACKing Commitment Message");
eap_peer_tls_reset_output(&data->ssl);
/* Send an ACK to allow the server to complete exchange */
res = 1;
}