DGNum/hostapd
6
0
Fork 0
Code Issues Pull requests 1 Projects Releases Packages Wiki Activity Actions

TNC: Added preliminary code for IF-TNCCS-SOH client side support

Browse source 
Process SoH Request in SoH EAP Extension method and reply with SoH TLV. The
contents of SSoH is not yet complete (i.e., some of the required attributes
are still missing). Use of SoH is disabled by default; it can be enabled
with tnc=soh in phase1 parameter for PEAP.
This commit is contained in:
Jouni Malinen 2008-04-08 16:15:56 +03:00
parent d6888f9e37
commit 0146165170
3 changed files with 159 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

42
src/eap_peer/eap_peap.c
View file

@ -21,6 +21,7 @@
#include "eap_config.h"
#include "tls.h"
#include "eap_common/eap_tlv_common.h"
#include "tncc.h"
/* Maximum supported PEAP version
@ -65,6 +66,8 @@ struct eap_peap_data {
int crypto_binding_used;
u8 ipmk[40];
u8 cmk[20];
int soh; /* Whether IF-TNCCS-SOH (Statement of Health; Microsoft NAP)
* is enabled. */
};
@ -112,6 +115,13 @@ static int eap_peap_parse_phase1(struct eap_peap_data *data,
wpa_printf(MSG_DEBUG, "EAP-PEAP: Require cryptobinding");
}
#ifdef EAP_TNC
if (os_strstr(phase1, "tnc=soh")) {
data->soh = 1;
wpa_printf(MSG_DEBUG, "EAP-PEAP: SoH enabled");
}
#endif /* EAP_TNC */
return 0;
}
@ -697,6 +707,38 @@ static int eap_peap_phase2_request(struct eap_sm *sm,
data->phase2_success = 1;
}
break;
case EAP_TYPE_EXPANDED:
#ifdef EAP_TNC
if (data->soh) {
const u8 *epos;
size_t eleft;
epos = eap_hdr_validate(EAP_VENDOR_MICROSOFT, 0x21,
req, &eleft);
if (epos) {
struct wpabuf *buf;
wpa_printf(MSG_DEBUG,
"EAP-PEAP: SoH EAP Extensions");
buf = tncc_process_soh_request(epos, eleft);
if (buf) {
*resp = eap_msg_alloc(
EAP_VENDOR_MICROSOFT, 0x21,
wpabuf_len(buf),
EAP_CODE_RESPONSE,
hdr->identifier);
if (*resp == NULL) {
ret->methodState = METHOD_DONE;
ret->decision = DECISION_FAIL;
return -1;
}
wpabuf_put_buf(*resp, buf);
wpabuf_free(buf);
break;
}
}
}
#endif /* EAP_TNC */
/* fall through */
default:
if (data->phase2_type.vendor == EAP_VENDOR_IETF &&
data->phase2_type.method == EAP_TYPE_NONE) {