jeltz/hostap
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
hostap/src/eap_peer
History
Jouni Malinen edd757e8a3 Use larger buffer for TLS encryption to avoid issues with GnuTLS 
It looks like GnuTLS (at least newer versions) is using random padding
on the application data and the previously used 100 byte extra buffer
for tls_connection_encrypt() calls was not enough to handle all cases.
This resulted in semi-random authentication failures with EAP-PEAP and
EAP-TTLS during Phase 2.

Increase the extra space for encryption from 100 to 300 bytes and add an
error message into tls_gnutls.c to make it easier to notice this issue
should it ever show up again even with the larger buffer.
2009-02-09 22:37:55 +02:00
..
.gitignore Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
eap.c Added protection against EAP-AKA' -> EAP-AKA bidding down attacks 2008-12-05 22:25:47 +02:00
eap.h WPS: Moved mac_addr and uuid configuration into wps_context 2008-11-28 20:44:47 +02:00
eap_aka.c Don't include unused calls to SHA256 functions if EAP-AKA' is not enabled 2008-12-11 00:49:39 +02:00
eap_config.h Silenced number of Doxygen warnings 2009-01-04 15:07:54 +02:00
eap_fast.c Cleaned up EAP-MSCHAPv2 key derivation 2008-12-14 13:12:20 +02:00
eap_fast_pac.c Fixed fwrite error path in eap_fast_write_pac not to free buf 2008-11-01 17:09:28 +02:00
eap_fast_pac.h Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
eap_gpsk.c Mark functions static if not used elsewhere and use proper prototypes 2009-01-03 20:38:42 +02:00
eap_gtc.c Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
eap_i.h Cleaned up EAP-MSCHAPv2 key derivation 2008-12-14 13:12:20 +02:00
eap_ikev2.c Renamed MSG to PROC_MSG to avoid conflicts with MinGW winuser.h 2008-08-10 18:00:11 +03:00
eap_leap.c Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
eap_md5.c Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
eap_methods.c Add a starting point for EAP-AKA' (draft-arkko-eap-aka-kdf-10) 2008-12-02 20:12:49 +02:00
eap_methods.h Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
eap_mschapv2.c Cleaned up EAP-MSCHAPv2 key derivation 2008-12-14 13:12:20 +02:00
eap_otp.c Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
eap_pax.c Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
eap_peap.c Fixed interoperability issue with PEAPv0 cryptobinding and NPS 2008-12-15 00:15:54 +02:00
eap_psk.c Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
eap_sake.c Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
eap_sim.c Add more verbose debug output for GSM-Milenage use (RAND,SRES,Kc) 2008-11-22 14:06:58 +02:00
eap_tls.c Separate OpenSSL engine configuration for Phase 2 2008-11-18 16:53:32 +02:00
eap_tls_common.c Use larger buffer for TLS encryption to avoid issues with GnuTLS 2009-02-09 22:37:55 +02:00
eap_tls_common.h Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
eap_tnc.c Renamed MSG to PROC_MSG to avoid conflicts with MinGW winuser.h 2008-08-10 18:00:11 +03:00
eap_ttls.c Cleaned up EAP-MSCHAPv2 key derivation 2008-12-14 13:12:20 +02:00
eap_vendor_test.c Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
eap_wsc.c WPS: Add support for external Registrars using UPnP transport 2009-01-29 18:47:02 +02:00
ikev2.c Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
ikev2.h Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
Makefile Fix building dynamic EAP peer modules 2009-02-07 10:05:23 +02:00
mschapv2.c Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
mschapv2.h Re-initialize hostapd/wpa_supplicant git repository based on 0.6.3 release 2008-02-27 17:34:43 -08:00
tncc.c Added option to force SoH version 1 (tnc=soh1) 2008-12-07 21:00:42 +02:00
tncc.h Added option to force SoH version 1 (tnc=soh1) 2008-12-07 21:00:42 +02:00